遠端 Windows 主機遺漏 KB3087040。因此，會受到多個弱點影響：

- 存在一個不明的堆疊損毀問題，會允許遠端攻擊者執行任意程式碼。
 (CVE-2015-5567、CVE-2015-5579)

- 存在一個向量長度損毀問題，會允許遠端攻擊者造成不明影響。
 (CVE-2015-5568)

- 不明元件中存在一個釋放後使用錯誤，是因不當清理使用者提供的輸入所導致。遠端攻擊者可加以惡意利用，透過特製的檔案解除參照已釋放的記憶體，以及執行任意程式碼。(CVE-2015-5570、CVE-2015-5574、CVE-2015-5581、CVE-2015-5584、CVE-2015-6682)

- 存在一個不明瑕疵，是因無法拒絕來自有弱點的 JSONP 回呼 API 之內容所導致。遠端攻擊者可惡意利用這點而造成不明影響。
 (CVE-2015-5571)

- 存在一個不明瑕疵，會允許遠端攻擊者繞過安全性限制，並取得敏感資訊的存取權。(CVE-2015-5572)

- 存在一個不明類型混淆瑕疵，會允許遠端攻擊者執行任意程式碼。
 (CVE-2015-5573)

- 不明元件中存在一個瑕疵，是因處理特製檔案時不當驗證使用者提供的輸入所導致。遠端攻擊者可加以惡意利用而損毀記憶體，從而導致拒絕服務或任意程式碼執行。(CVE-2015-5575、CVE-2015-5577、CVE-2015-5578、CVE-2015-5580、CVE-2015-5582、CVE-2015-5588、CVE-2015-6677)

- 存在一個記憶體洩漏問題，會允許遠端攻擊者造成不明影響。(CVE-2015-5576)

- 存在一個堆疊緩衝區溢位情形，是因不當驗證使用者提供的輸入所導致。遠端攻擊者可惡意利用這點，執行任意程式碼。(CVE-2015-5587)

- 存在一個不明的溢位情形，是因不當驗證使用者提供的輸入所導致。遠端攻擊者可惡意利用這點，執行任意程式碼。(CVE-2015-6676、CVE-2015-6678)

- 存在一個不明瑕疵，會允許遠端攻擊者繞過同源原則限制，並取得敏感資訊的存取權。(CVE-2015-6679)

遠端 Redhat Enterprise Linux 6 主機上安裝的套件受到 RHSA-2015:1814 公告中提及的多個弱點影響。

    該 flash-plugin 套件包含與 Mozilla Firefox 相容的 Adobe Flash Player 網頁瀏覽器外掛程式。

    此更新可修正 Adobe Flash Player 中的多個弱點。Adobe 安全性頁面 APSB15-23 中詳述的這些弱點 (如〈參考資料〉一節中所列)，可允許攻擊者建立特製的 SWF 檔案，在受害者載入含有惡意 SWF 內容的頁面時，會造成 Flash 外掛程式損毀、執行任意程式碼或是洩漏敏感資訊。 (CVE-2015-5567、CVE-2015-5568、CVE-2015-5570、CVE-2015-5571、CVE-2015-5572、CVE-2015-5573、CVE-2015-5574、CVE-2015-5575、CVE-2015-5576、CVE-2015-5577、CVE-2015-5578、CVE-2015-5579、CVE-2015-5580、CVE-2015-5581、CVE-2015-5582、CVE-2015-5584、CVE-2015-5587、CVE-2015-5588、CVE-2015-6676、CVE-2015-6677、CVE-2015-6678、CVE-2015-6679、CVE-2015-6682)

    所有 Adobe Flash Player 使用者皆應安裝此更新套件，其可將 Flash Player 升級至 11.2.202.521 版本。

Tenable 已直接從 Red Hat Enterprise Linux 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

The version of Google Chrome OS on the remote mobile host is prior to 45.0.2454.98 and thus unpatched for the following vulnerabilities :

 - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579) 
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568) 
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to deference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682) 
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571) 
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572) 
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573) 
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677) 
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576) 
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587) 
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678) 
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

Versions of Adobe AIR prior to 19.0.0.190 are outdated and thus unpatched for the following vulnerabilities :

  - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579)
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568)
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to dereference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682)
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571)
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572)
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573)
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576)
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587)
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678)
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

Versions of Adobe Flash Player prior to 19.0.0.185 are outdated and thus unpatched for the following vulnerabilities :

  - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579)
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568)
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to dereference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682)
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571)
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572)
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573)
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576)
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587)
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678)
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
86065	MS KB3087040：針對 Internet Explorer 和 Microsoft Edge 之 Adobe Flash Player 中弱點的更新	Nessus	Windows	2015/9/22	2019/11/22	critical
86097	RHEL 6: flash-plugin (RHSA-2015:1814)	Nessus	Red Hat Local Security Checks	2015/9/23	2025/4/15	high
8888	Google Chrome OS < 45.0.2454.98 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2015/10/2	2019/3/6	high
9003	Adobe AIR < 19.0.0.190 Multiple Vulnerabilities (APSB15-23)	Nessus Network Monitor	Web Clients	2015/10/21	2019/3/6	critical
9004	Flash Player < 19.0.0.185 Multiple Vulnerabilities (APSB15-23)	Nessus Network Monitor	Web Clients	2015/10/21	2019/3/6	critical

检测

插件搜索

critical

high

high

critical

critical