远程 Mac OS X 主机上安装的 Adobe AIR 版本等于或低于 18.0.0.199。因此，它受到多种漏洞的影响：

- 存在不明堆栈损坏问题，远程攻击者可利用此问题执行任意代码。
 （CVE-2015-5567、CVE-2015-5579）

- 存在一个矢量长度损坏问题，远程攻击者可利用此问题造成不明影响。
 (CVE-2015-5568)

- 由于未正确审查用户提供的输入，不明组件中存在一个释放后使用错误。远程攻击者可利用此错误，通过特别构建的文件取消引用已经释放的内存并执行任意代码。（CVE-2015-5570、CVE-2015-5574、CVE-2015-5581、CVE-2015-5584、CVE-2015-6682）

- 由于未能拒绝来自有漏洞 JSONP 回调 API 的内容，存在一个不明缺陷。远程攻击者可以利用此错误造成不明影响。
 (CVE-2015-5571)

- 存在不明缺陷，远程攻击者可利用此缺陷绕过安全限制并获取敏感信息的访问权限。(CVE-2015-5572)

- 存在不明类型混淆缺陷，远程攻击者可利用此缺陷执行任意代码。
 (CVE-2015-5573)

- 由于处理特别构建的文件时未正确验证用户提供的输入，导致不明组件中存在缺陷。远程攻击者可利用此缺陷破坏内存，从而导致拒绝服务或执行任意代码。（CVE-2015-5575、CVE-2015-5577、CVE-2015-5578、CVE-2015-5580、CVE-2015-5582、CVE-2015-5588、CVE-2015-6677）

- 存在一个内存泄漏问题，远程攻击者可利用此问题造成不明影响。(CVE-2015-5576)

- 由于未正确验证用户提供的输入，存在堆栈缓冲区溢出情况。远程攻击者可利用此缺陷执行任意代码。(CVE-2015-5587)

- 由于未正确验证用户提供的输入，存在不明溢出情况。远程攻击者可利用此缺陷执行任意代码。（CVE-2015-6676、CVE-2015-6678）

- 存在一个不明缺陷，远程攻击者可利用此缺陷绕过同源策略限制并获取敏感信息的访问权限。(CVE-2015-6679)

远程 Windows 主机缺少 KB3087040。因此，它受到多种漏洞的影响：

- 存在不明堆栈损坏问题，远程攻击者可利用此问题执行任意代码。
 （CVE-2015-5567、CVE-2015-5579）

- 存在一个矢量长度损坏问题，远程攻击者可利用此问题造成不明影响。
 (CVE-2015-5568)

- 由于未正确审查用户提供的输入，不明组件中存在一个释放后使用错误。远程攻击者可利用此错误，通过特别构建的文件取消引用已经释放的内存并执行任意代码。（CVE-2015-5570、CVE-2015-5574、CVE-2015-5581、CVE-2015-5584、CVE-2015-6682）

- 由于未能拒绝来自有漏洞 JSONP 回调 API 的内容，存在一个不明缺陷。远程攻击者可以利用此错误造成不明影响。
 (CVE-2015-5571)

- 存在不明缺陷，远程攻击者可利用此缺陷绕过安全限制并获取敏感信息的访问权限。(CVE-2015-5572)

- 存在不明类型混淆缺陷，远程攻击者可利用此缺陷执行任意代码。
 (CVE-2015-5573)

- 由于处理特别构建的文件时未正确验证用户提供的输入，导致不明组件中存在缺陷。远程攻击者可利用此缺陷破坏内存，从而导致拒绝服务或执行任意代码。（CVE-2015-5575、CVE-2015-5577、CVE-2015-5578、CVE-2015-5580、CVE-2015-5582、CVE-2015-5588、CVE-2015-6677）

- 存在一个内存泄漏问题，远程攻击者可利用此问题造成不明影响。(CVE-2015-5576)

- 由于未正确验证用户提供的输入，存在堆栈缓冲区溢出情况。远程攻击者可利用此缺陷执行任意代码。(CVE-2015-5587)

- 由于未正确验证用户提供的输入，存在不明溢出情况。远程攻击者可利用此缺陷执行任意代码。（CVE-2015-6676、CVE-2015-6678）

- 存在一个不明缺陷，远程攻击者可利用此缺陷绕过同源策略限制并获取敏感信息的访问权限。(CVE-2015-6679)

The version of Google Chrome OS on the remote mobile host is prior to 45.0.2454.98 and thus unpatched for the following vulnerabilities :

 - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579) 
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568) 
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to deference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682) 
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571) 
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572) 
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573) 
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677) 
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576) 
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587) 
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678) 
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

Versions of Adobe AIR prior to 19.0.0.190 are outdated and thus unpatched for the following vulnerabilities :

  - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579)
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568)
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to dereference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682)
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571)
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572)
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573)
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576)
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587)
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678)
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

Versions of Adobe Flash Player prior to 19.0.0.185 are outdated and thus unpatched for the following vulnerabilities :

  - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579)
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568)
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to dereference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682)
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571)
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572)
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573)
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576)
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587)
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678)
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
86062	Adobe AIR for Mac <= 18.0.0.199 多种漏洞 (APSB15-23)	Nessus	MacOS X Local Security Checks	2015/9/22	2019/11/22	critical
86065	MS KB3087040：Internet Explorer 和 Microsoft Edge 中 Adobe Flash Player 的漏洞更新	Nessus	Windows	2015/9/22	2019/11/22	critical
8888	Google Chrome OS < 45.0.2454.98 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2015/10/2	2019/3/6	high
9003	Adobe AIR < 19.0.0.190 Multiple Vulnerabilities (APSB15-23)	Nessus Network Monitor	Web Clients	2015/10/21	2019/3/6	critical
9004	Flash Player < 19.0.0.185 Multiple Vulnerabilities (APSB15-23)	Nessus Network Monitor	Web Clients	2015/10/21	2019/3/6	critical

检测

插件搜索

critical

critical

high

critical

critical