The remote host is affected by the vulnerability described in GLSA-200511-21 (Macromedia Flash Player: Remote arbitrary code execution)

    When handling a SWF file, the Macromedia Flash Player incorrectly     validates the frame type identifier stored in the SWF file which is     used as an index to reference an array of function pointers. A     specially crafted SWF file can cause this index to reference memory     outside of the scope of the Macromedia Flash Player, which in turn can     cause the Macromedia Flash Player to use unintended memory address(es)     as function pointers.
  Impact :

    An attacker serving a maliciously crafted SWF file could entice a     user to view the SWF file and execute arbitrary code on the user's     machine.
  Workaround :

    There is no known workaround at this time.

Updated Macromedia Flash Player packages that fix a security issue are now available.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

The flash-plugin package contains a Mozilla-compatible Macromedia Flash Player browser plug-in.

A buffer overflow bug was discovered in the Macromedia Flash Player.
It may be possible to execute arbitrary code on a victim's machine if the victim opens a malicious Macromedia Flash file. The Common Vulnerabilities and Exposures project assigned the name CVE-2005-2628 to this issue.

Users of Macromedia Flash Player should upgrade to these updated packages, which contain version 7.0.61 and are not vulnerable to this issue.

セキュリティの問題を修正する更新済みの Macromedia Flash Player パッケージが、現在利用可能です。

Red Hat セキュリティレスポンスチームは、この更新には重大なセキュリティインパクトがあるものとして評価しています。

Flash プラグインパッケージには、Mozilla と互換性のある Macromedia Flash Player ブラウザプラグインがあります。

Macromedia Flash Player でバッファオーバーフローのバグが発見されました。
被害者が悪意のある Macromedia Flash ファイルを開くと、被害者のマシンで任意のコードを実行できる可能性があります。Common Vulnerabilities and Exposures プロジェクトは、この問題に CVE-2005-2628 という名前を割り当てました。

Macromedia Flash Player のユーザーは、バージョン 7.0.61 を含み、この問題に脆弱ではない、これらの更新済みパッケージにアップグレードする必要があります。

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003.

This security update contains fixes for the following applications :

AppKit ImageIO BOM CFNetwork ClamAV (Mac OS X Server only) CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Mail MySQL Manager (Mac OS X Server only) Preview QuickDraw QuickTime Streaming Server Ruby Safari

According to its version number, the instance of Macromedia's Flash Player on the remote host fails to validate the frame type identifier from SWF files before using that as an index into an array of function pointers.  An attacker may be able to leverage this issue using a specially crafted SWF file to execute arbitrary code on the remote host subject to the permissions of the user running Flash Player.

更新后的 Macromedia Flash Player 程序包修复了一个安全问题，现在可用。

Red Hat 安全响应团队将此更新评级为具有严重安全影响。

flash 插件程序包包含兼容 Mozilla 的 Macromedia Flash Player 浏览器插件。

在 Macromedia Flash Player 中发现一个缓冲区溢出缺陷。
如果受害者打开恶意 Macromedia Flash 文件，则可能在受害者的计算机上执行任意代码。通用漏洞和暴露计划为此问题分配了名称 CVE-2005-2628。

Macromedia Flash Player 用户应升级这些更新后的程序包，其中包含版本 7.0.61，并且不易受到此问题的影响。

現已提供更新版 Macromedia Flash Player 套件，可修正一個安全性問題。

Red Hat 安全性回應團隊已將此更新評等為具有重大安全性影響。

Flash 外掛程式套件包含一個與 Mozilla 相容的 Macromedia Flash Player 瀏覽器外掛程式。

在 Macromedia Flash Player 中發現一個緩衝區溢位錯誤。
如果受害者開啟惡意 Macromedia Flash 檔案，便可能在受害者的電腦上執行任意程式碼。Common Vulnerabilities and Exposures 專案已將名稱 CVE-2005-2628 指派給此問題。

Macromedia Flash Player 使用者應升級至這些更新版套件，其中包含 7.0.61 版且不易受此問題影響。

The remote host is using a version of curl (or libcurl) that is vulnerable to a remote buffer overflows. To exploit, an attacker would have to set up a rogue web server and entice a curl user into browsing to the malicious server.  Upon successful exploitation, the attacker would be able to execute arbitrary commands with the rights of the web server.

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications :
AppKit
ImageIO
BOM
CFNetwork
ClamAV (Mac OS X Server only)
CoreFoundation
CoreGraphics
Finder
FTPServer
Flash Player
KeyChain
LaunchServices
libcurl
Mail
MySQL Manager (Mac OS X Server only)
Preview
QuickDraw
QuickTime Streaming Server
Ruby
Safari

The remote host is running Apple Mac OS X, but lacks Security Update 2005-009. This security update contains fixes for the following applications :
- Apache2
- Apache_mod_ssl
- CoreFoundation
- curl
- iodbcadmintool
- OpenSSL
- passwordserver
- Safari
- sudo
- syslog 

The remote host is running ClamAV, an antivirus application. There are a number of flaws that affect this version of ClamAV, and the vendor recommends upgrading to version 0.88.1 or higher. 

The remote host is using a version of curl (or libcurl) that is vulnerable to a remote buffer overflows. To exploit, an attacker would have to set up a rogue web server that would reply with a malicious NTLM authentication request.  Upon successful exploitation, the attacker would be able to execute arbitrary commands with the rights of the web server.

The remote host is using a version of wget that contains a flaw in the way that it handles NTLM authentication data.  Specifically, a rogue website that returns malformed data during an NTLM authentication session will be able to execute arbitrary code on the local client machine. 

The remote Mac OS X host is running a version of Quicktime prior to 7.1.  The remote version of Quicktime is vulnerable to various integer and buffer overflows involving specially-crafted image and media files.  An attacker may be able to leverage these issues to execute arbitrary code on the remote host by sending a malformed file to a victim and having it opened using QuickTime player.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
20265	GLSA-200511-21 : Macromedia Flash Player: Remote arbitrary code execution	Nessus	Gentoo Local Security Checks	2005/12/7	2021/1/6	medium
63830	RHEL 3 / 4 : flash-plugin (RHSA-2005:835)	Nessus	Red Hat Local Security Checks	2013/1/24	2021/1/14	high
63830	RHEL 3 / 4：Flash プラグイン（RHSA-2005:835）	Nessus	Red Hat Local Security Checks	2013/1/24	2021/1/14	high
21341	Mac OS X Multiple Vulnerabilities (Security Update 2006-003)	Nessus	MacOS X Local Security Checks	2006/5/12	2024/5/28	critical
20158	Flash Player < 7.0.60.0 / 8.0.22.0 Multiple Vulnerabilities	Nessus	Windows	2005/11/7	2022/4/11	high
63830	RHEL 3/4：flash-plugin (RHSA-2005:835)	Nessus	Red Hat Local Security Checks	2013/1/24	2021/1/14	high
63830	RHEL 3 / 4 : flash-plugin (RHSA-2005:835)	Nessus	Red Hat Local Security Checks	2013/1/24	2021/1/14	high
3318	Curl < 7.15.1 Multiple Remote Overflows	Nessus Network Monitor	Web Clients	2005/12/7	2019/3/6	critical
3617	Mac OS X Multiple Vulnerabilities (Security Update 2006-003)	Nessus Network Monitor	Operating System Detection	2006/5/12	2019/3/6	medium
3308	Mac OS X Multiple Vulnerabilities (Security Update 2005-009)	Nessus Network Monitor	Operating System Detection	2005/11/30	2019/3/6	high
3505	ClamAV < 0.88.1 Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	Web Clients	2004/8/18	2019/3/6	medium
3256	Curl NTLM Buffer Overflow	Nessus Network Monitor	Web Clients	2005/10/14	2019/3/6	medium
3255	GNU WGet < 1.10.2 Buffer Overflow	Nessus Network Monitor	Web Clients	2005/10/14	2019/3/6	medium
3616	Quicktime < 7.1 on Mac OS X Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2006/5/12	2019/3/6	high

检测

插件搜索

medium

high

high

critical

high

high

high

critical

medium

high

medium

medium

medium

high