The version of Google Chrome installed on the remote Windows host is prior to 43.0.2357.124. It is, therefore, affected by multiple vulnerabilities related to Adobe Flash :

  - An unspecified vulnerability exists that allows an     attacker to bypass the fix for CVE-2014-5333.
    (CVE-2015-3096)

  - An unspecified memory address randomization flaw exists     on Windows 7 64-bit. (CVE-2015-3097)

  - Multiple unspecified flaws exist that allow a remote     attacker to bypass the same-origin-policy, resulting in     the disclosure of sensitive information. (CVE-2015-3098,     CVE-2015-3099, CVE-2015-3102)

  - A remote code execution vulnerability exists due to an     unspecified stack overflow flaw. (CVE-2015-3100)

  - Multiple use-after-free errors exist that allow an     attacker to execute arbitrary code. (CVE-2015-3103,     CVE-2015-3106, CVE-2015-3107)

  - An integer overflow condition exists due to improper     validation of user-supplied input. A remote attacker can     exploit this to execute arbitrary code. (CVE-2015-3104)

  - A memory corruption flaw exists due to improper     validation of user-supplied input. A remote attacker can     exploit this flaw, via specially crafted flash     content, to corrupt memory and execute arbitrary code.
    (CVE-2015-3105)

  - An unspecified memory leak exists that allows an     attacker to bypass the Address Space Layout     Randomization (ASLR) feature. (CVE-2015-3108)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 17.0.0.172. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified vulnerability exists that allows an     attacker to bypass the fix for CVE-2014-5333.
    (CVE-2015-3096)

  - An unspecified memory address randomization flaw exists     on Windows 7 64-bit. (CVE-2015-3097)

  - Multiple unspecified flaws exist that allow a remote     attacker to bypass the same-origin-policy, resulting in     the disclosure of sensitive information. (CVE-2015-3098,     CVE-2015-3099, CVE-2015-3102)

  - A remote code execution vulnerability exists due to an     unspecified stack overflow flaw. (CVE-2015-3100)

  - A permission flaw exists in the Flash broker for IE     that allows an attacker to perform a privilege     escalation. (CVE-2015-3101)

  - Multiple use-after-free errors exist that allow an     attacker to execute arbitrary code. (CVE-2015-3103,     CVE-2015-3106, CVE-2015-3107)

  - An integer overflow condition exists due to improper     validation of user-supplied input. A remote attacker can     exploit this to execute arbitrary code. (CVE-2015-3104)

  - A memory corruption flaw exists due to improper     validation of user-supplied input. A remote attacker can     exploit this flaw, via specially crafted flash     content, to corrupt memory and execute arbitrary code.
    (CVE-2015-3105)

  - An unspecified memory leak exists that allows an     attacker to bypass the Address Space Layout     Randomization (ASLR) feature. (CVE-2015-3108)

According to its version, the installation of Adobe AIR on the remote Windows host is equal or prior to 18.0.0.144. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists that     allows an attacker to guess the address for the Flash     heap. (CVE-2015-3097)

  - Multiple heap-based buffer overflow vulnerabilities     exist that allow arbitrary code execution.
    (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118)

  - Multiple memory corruption vulnerabilities exist that     allow arbitrary code execution. (CVE-2015-3117,     CVE-2015-3123, CVE-2015-3130, CVE-2015-3133,     CVE-2015-3134, CVE-2015-4431)

  - Multiple NULL pointer dereference flaws exist.
    (CVE-2015-3126, CVE-2015-4429)

  - A security bypass vulnerability exists that results in     an information disclosure. (CVE-2015-3114)

  - Multiple type confusion vulnerabilities exist that allow     arbitrary code execution. (CVE-2015-3119, CVE-2015-3120,     CVE-2015-3121, CVE-2015-3122, CVE-2015-4433)

  - Multiple use-after-free errors exist that allow     arbitrary code execution. (CVE-2015-3118, CVE-2015-3124,     CVE-2015-5117, CVE-2015-3127, CVE-2015-3128,     CVE-2015-3129, CVE-2015-3131, CVE-2015-3132,     CVE-2015-3136, CVE-2015-3137, CVE-2015-4428,     CVE-2015-4430, CVE-2015-5119)

  - Multiple same-origin policy bypass vulnerabilities exist     that allow information disclosure. (CVE-2014-0578,     CVE-2015-3115, CVE-2015-3116, CVE-2015-3125,     CVE-2015-5116)

  - A memory corruption issue exists due to improper     validation of user-supplied input. An attacker can     exploit this to execute arbitrary code. (CVE-2015-5124)

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 18.0.0.194. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists that     allows an attacker to guess the address for the Flash     heap. (CVE-2015-3097)

  - Multiple heap-based buffer overflow vulnerabilities     exist that allow arbitrary code execution.
    (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118)

  - Multiple memory corruption vulnerabilities exist that     allow arbitrary code execution. (CVE-2015-3117,     CVE-2015-3123, CVE-2015-3130, CVE-2015-3133,     CVE-2015-3134, CVE-2015-4431)

  - Multiple NULL pointer dereference flaws exist.
    (CVE-2015-3126, CVE-2015-4429)

  - A security bypass vulnerability exists that results in     an information disclosure. (CVE-2015-3114)

  - Multiple type confusion vulnerabilities exist that allow     arbitrary code execution. (CVE-2015-3119, CVE-2015-3120,     CVE-2015-3121, CVE-2015-3122, CVE-2015-4433)

  - Multiple use-after-free errors exist that allow     arbitrary code execution. (CVE-2015-3118, CVE-2015-3124,     CVE-2015-5117, CVE-2015-3127, CVE-2015-3128,     CVE-2015-3129, CVE-2015-3131, CVE-2015-3132,     CVE-2015-3136, CVE-2015-3137, CVE-2015-4428,     CVE-2015-4430, CVE-2015-5119)

  - Multiple same-origin policy bypass vulnerabilities exist     that allow information disclosure. (CVE-2014-0578,     CVE-2015-3115, CVE-2015-3116, CVE-2015-3125,     CVE-2015-5116)

  - A memory corruption issue exists due to improper     validation of user-supplied input. An attacker can     exploit this to execute arbitrary code. (CVE-2015-5124)

The remote Windows host is missing KB3065823. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists that     allows an attacker to guess the address for the Flash     heap. (CVE-2015-3097)

  - Multiple heap-based buffer overflow vulnerabilities     exist that allow arbitrary code execution.
    (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118)

  - Multiple memory corruption vulnerabilities exist that     allow arbitrary code execution. (CVE-2015-3117,     CVE-2015-3123, CVE-2015-3130, CVE-2015-3133,     CVE-2015-3134, CVE-2015-4431)

  - Multiple NULL pointer dereference flaws exist.
    (CVE-2015-3126, CVE-2015-4429)

  - A security bypass vulnerability exists that results in     an information disclosure. (CVE-2015-3114)

  - Multiple type confusion vulnerabilities exist that allow     arbitrary code execution. (CVE-2015-3119, CVE-2015-3120,     CVE-2015-3121, CVE-2015-3122, CVE-2015-4433)

  - Multiple use-after-free errors exist that allow     arbitrary code execution. (CVE-2015-3118, CVE-2015-3124,     CVE-2015-5117, CVE-2015-3127, CVE-2015-3128,     CVE-2015-3129, CVE-2015-3131, CVE-2015-3132,     CVE-2015-3136, CVE-2015-3137, CVE-2015-4428,     CVE-2015-4430, CVE-2015-5119)

  - Multiple same-origin policy bypass vulnerabilities exist     that allow information disclosure. (CVE-2014-0578,     CVE-2015-3115, CVE-2015-3116, CVE-2015-3125,     CVE-2015-5116)

  - A memory corruption issue exists due to improper     validation of user-supplied input. An attacker can     exploit this to execute arbitrary code. (CVE-2015-5124)

According to its version, the installation of Adobe AIR on the remote Mac OS X host is equal or prior to 18.0.0.144. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists that     allows an attacker to guess the address for the Flash     heap. (CVE-2015-3097)

  - Multiple heap-based buffer overflow vulnerabilities     exist that allow arbitrary code execution.
    (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118)

  - Multiple memory corruption vulnerabilities exist that     allow arbitrary code execution. (CVE-2015-3117,     CVE-2015-3123, CVE-2015-3130, CVE-2015-3133,     CVE-2015-3134, CVE-2015-4431)

  - Multiple NULL pointer dereference flaws exist.
    (CVE-2015-3126, CVE-2015-4429)

  - A security bypass vulnerability exists that results in     an information disclosure. (CVE-2015-3114)

  - Multiple type confusion vulnerabilities exist that allow     arbitrary code execution. (CVE-2015-3119, CVE-2015-3120,     CVE-2015-3121, CVE-2015-3122, CVE-2015-4433)

  - Multiple use-after-free errors exist that allow     arbitrary code execution. (CVE-2015-3118, CVE-2015-3124,     CVE-2015-5117, CVE-2015-3127, CVE-2015-3128,     CVE-2015-3129, CVE-2015-3131, CVE-2015-3132,     CVE-2015-3136, CVE-2015-3137, CVE-2015-4428,     CVE-2015-4430, CVE-2015-5119)

  - Multiple same-origin policy bypass vulnerabilities exist     that allow information disclosure. (CVE-2014-0578,     CVE-2015-3115, CVE-2015-3116, CVE-2015-3125,     CVE-2015-5116)

  - A memory corruption issue exists due to improper     validation of user-supplied input. An attacker can     exploit this to execute arbitrary code. (CVE-2015-5124)

The remote host is affected by the vulnerability described in GLSA-201506-01 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process, cause a Denial of Service condition, obtain       sensitive information, or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 18.0.0.194. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists that     allows an attacker to guess the address for the Flash     heap. (CVE-2015-3097)

  - Multiple heap-based buffer overflow vulnerabilities     exist that allow arbitrary code execution.
    (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118)

  - Multiple memory corruption vulnerabilities exist that     allow arbitrary code execution. (CVE-2015-3117,     CVE-2015-3123, CVE-2015-3130, CVE-2015-3133,     CVE-2015-3134, CVE-2015-4431)

  - Multiple NULL pointer dereference flaws exist.
    (CVE-2015-3126, CVE-2015-4429)

  - A security bypass vulnerability exists that results in     an information disclosure. (CVE-2015-3114)

  - Multiple type confusion vulnerabilities exist that allow     arbitrary code execution. (CVE-2015-3119, CVE-2015-3120,     CVE-2015-3121, CVE-2015-3122, CVE-2015-4433)

  - Multiple use-after-free errors exist that allow     arbitrary code execution. (CVE-2015-3118, CVE-2015-3124,     CVE-2015-5117, CVE-2015-3127, CVE-2015-3128,     CVE-2015-3129, CVE-2015-3131, CVE-2015-3132,     CVE-2015-3136, CVE-2015-3137, CVE-2015-4428,     CVE-2015-4430, CVE-2015-5119)

  - Multiple same-origin policy bypass vulnerabilities exist     that allow information disclosure. (CVE-2014-0578,     CVE-2015-3115, CVE-2015-3116, CVE-2015-3125,     CVE-2015-5116)

  - A memory corruption issue exists due to improper     validation of user-supplied input. An attacker can     exploit this to execute arbitrary code. (CVE-2015-5124)

The version of Google Chrome installed on the remote Mac OS X host is prior to 43.0.2357.132. It is, therefore, affected by multiple vulnerabilities in the bundled version of Adobe Flash :

  - An information disclosure vulnerability exists that     allows an attacker to guess the address for the Flash     heap. (CVE-2015-3097)

  - Multiple heap-based buffer overflow vulnerabilities     exist that allow arbitrary code execution.
    (CVE-2015-3135, CVE-2015-4432, CVE-2015-5118)

  - Multiple memory corruption vulnerabilities exist that     allow arbitrary code execution. (CVE-2015-3117,     CVE-2015-3123, CVE-2015-3130, CVE-2015-3133,     CVE-2015-3134, CVE-2015-4431)

  - Multiple NULL pointer dereference flaws exist.
    (CVE-2015-3126, CVE-2015-4429)

  - A security bypass vulnerability exists that results in     an information disclosure. (CVE-2015-3114)

  - Multiple type confusion vulnerabilities exist that allow     arbitrary code execution. (CVE-2015-3119, CVE-2015-3120,     CVE-2015-3121, CVE-2015-3122, CVE-2015-4433)

  - Multiple use-after-free errors exist that allow     arbitrary code execution. (CVE-2015-3118, CVE-2015-3124,     CVE-2015-5117, CVE-2015-3127, CVE-2015-3128,     CVE-2015-3129, CVE-2015-3131, CVE-2015-3132,     CVE-2015-3136, CVE-2015-3137, CVE-2015-4428,     CVE-2015-4430, CVE-2015-5119)

  - Multiple same-origin policy bypass vulnerabilities exist     that allow information disclosure. (CVE-2014-0578,     CVE-2015-3115, CVE-2015-3116, CVE-2015-3125,     CVE-2015-5116)

  - A memory corruption issue exists due to improper     validation of user-supplied input. An attacker can     exploit this to execute arbitrary code. (CVE-2015-5124)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
84049	Google Chrome < 43.0.2357.124 Multiple Vulnerabilities	Nessus	Windows	2015/6/9	2022/4/11	critical
84158	Adobe AIR <= 17.0.0.172 Multiple Vulnerabilities (APSB15-11)	Nessus	Windows	2015/6/12	2022/4/11	critical
84641	Adobe AIR <= 18.0.0.144 Multiple Vulnerabilities (APSB15-16)	Nessus	Windows	2015/7/9	2022/4/11	critical
84644	Adobe Flash Player <= 18.0.0.194 Multiple Vulnerabilities (APSB15-16) (Mac OS X)	Nessus	MacOS X Local Security Checks	2015/7/9	2022/3/8	critical
84645	MS KB3065823: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer	Nessus	Windows	2015/7/9	2022/3/8	critical
84643	Adobe AIR for Mac <= 18.0.0.144 Multiple Vulnerabilities (APSB15-16)	Nessus	MacOS X Local Security Checks	2015/7/9	2022/3/8	critical
84315	GLSA-201506-01 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2015/6/22	2021/1/11	critical
84642	Adobe Flash Player <= 18.0.0.194 Multiple Vulnerabilities (APSB15-16)	Nessus	Windows	2015/7/9	2022/4/11	critical
84668	Google Chrome < 43.0.2357.132 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2015/7/10	2022/3/8	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical