Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.6.  Mac OS X 10.5.6 contains security fixes for the following products : 

  - ATS
  - BOM
  - CoreGraphics
  - CoreServices
  - CoreTypes
  - Flash Player Plug-in
  - Kernel
  - Libsystem
  - Managed Client
  - network_cmds
  - Podcast Producer
  - UDF

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.6. 

Mac OS X 10.5.6 contains security fixes for the following products :

  - ATS
  - BOM
  - CoreGraphics
  - CoreServices
  - CoreTypes
  - Flash Player Plug-in
  - Kernel
  - Libsystem
  - Managed Client
  - network_cmds
  - Podcast Producer
  - UDF

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2008-008 applied. 

This security update contains fixes for the following products :

  - BOM
  - CoreGraphics
  - CoreServices
  - Flash Player Plug-in
  - Libsystem
  - network_cmds
  - UDF

According to its version number, an instance of Adobe AIR on the remote Windows host is 1.5 or earlier.  Such versions are potentially affected by several vulnerabilities : 

  - A potential port-scanning issue. (CVE-2007-4324)

  - Possible privilege escalation attacks against web servers hosting Flash content and cross-domain policy files.  (CVE-2007-6243)

  - Potential Clipboard attacks. (CVE-2008-3873)

  - FileReference upload and download APIs that don't require user interaction. (CVE-2008-4401)

  - A potential cross-site scripting vulnerability. (CVE-2008-4818)

  - A potential issue that could be leveraged to conduct a DNS rebinding attack. (CVE-2008-4819)

  - An information disclosure issue affecting only the ActiveX control. (CVE-2008-4820)

  - An information disclosure issue involving interpretation of the 'jar: ' protocol and affecting only the plugin for Mozilla browsers. (CVE-2008-4821)

  - An issue with policy file interpretation could potentially lead to bypass of a non-root domain policy. (CVE-2008-4822)

  - A potential HTML injection issue involving an ActionScript attribute. (CVE-2008-4823)

  - Multiple input validation errors could potentially lead to execution of arbitrary code. (CVE-2008-4824)

  - An Adobe AIR application that loads data from an untrusted source could allow an attacker to execute untrusted JavaScript with elevated privileges. (CVE-2008-5108)

According to its version number, an instance of Adobe AIR on the remote Windows host is 1.1 or earlier.  Such versions are potentially affected by several vulnerabilities (APSB08-23 / APSB08-22 / APSB08-20 / APSB08-18):

  - A potential port-scanning issue. (CVE-2007-4324)

  - Possible privilege escalation attacks against web     servers hosting Flash content and cross-domain policy     files.  (CVE-2007-6243)

  - Potential Clipboard attacks. (CVE-2008-3873)

  - FileReference upload and download APIs that don't     require user interaction. (CVE-2008-4401)

  - A potential cross-site scripting vulnerability.     (CVE-2008-4818)

  - A potential issue that could be leveraged to conduct     a DNS rebinding attack. (CVE-2008-4819)

  - An information disclosure issue affecting only the     ActiveX control. (CVE-2008-4820)

  - An information disclosure issue involving interpretation     of the 'jar:' protocol and affecting only the plugin for     Mozilla browsers. (CVE-2008-4821)

  - An issue with policy file interpretation could     potentially lead to bypass of a non-root domain policy.     (CVE-2008-4822)

  - A potential HTML injection issue involving an     ActionScript attribute. (CVE-2008-4823)

  - Multiple input validation errors could potentially lead     to execution of arbitrary code. (CVE-2008-4824)

  - An Adobe AIR application that loads data from an     untrusted source could allow an attacker to execute     untrusted JavaScript with elevated privileges.     (CVE-2008-5108)

According to its version number, an instance of Flash Player on the remote Windows host is 9.0.124.0 or earlier.  Such versions are potentially affected by several vulnerabilities : 

  - A potential port-scanning issue. (CVE-2007-4324)
  - Possible privilege escalation attacks against web servers hosting Flash content and cross-domain policy files. (CVE-2007-6243)
  - Potential Clipboard attacks. (CVE-2008-3873)
  - FileReference upload and download APIs that don't require user interaction. (CVE-2008-4401)
  - A 'Clickjacking' issue that could be abused by an attacker to lure a web browser user into unknowingly clicking on a link or dialog. (CVE-2008-4503)
  - A potential cross-site scripting vulnerability. (CVE-2008-4818)
  - A potential issue that could be leveraged to conduct a DNS rebinding attack. (CVE-2008-4819)
  - An information disclosure issue affecting only the ActiveX control. (CVE-2008-4820)
  - An information disclosure issue involving interpretation of the 'jar: ' protocol and affecting only the plugin for Mozilla browsers. (CVE-2008-4821)
  - An issue with policy file interpretation could potentially lead to bypass of a non-root domain policy. (CVE-2008-4822)
  - A potential HTML injection issue involving an ActionScript attribute. (CVE-2008-4823)

According to its version number, an instance of Flash Player on the remote Windows host is 9.0.124.0 or earlier.  Such versions are potentially affected by several vulnerabilities :

  - A potential port-scanning issue. (CVE-2007-4324)

  - Possible privilege escalation attacks against web     servers hosting Flash content and cross-domain policy     files.  (CVE-2007-6243)

  - Potential Clipboard attacks. (CVE-2008-3873)

  - FileReference upload and download APIs that don't     require user interaction. (CVE-2008-4401)

  - A 'Clickjacking' issue that could be abused by an     attacker to lure a web browser user into unknowingly     clicking on a link or dialog. (CVE-2008-4503)

  - A potential cross-site scripting vulnerability.     (CVE-2008-4818)

  - A potential issue that could be leveraged in to conduct     a DNS rebinding attack. (CVE-2008-4819)

  - An information disclosure issue affecting only the     ActiveX control. (CVE-2008-4820)

  - An information disclosure issue involving interpretation     of the 'jar:' protocol and affecting only the plugin for     Mozilla browsers. (CVE-2008-4821)

  - An issue with policy file interpretation could     potentially lead to bypass of a non-root domain policy.     (CVE-2008-4822)

  - A potential HTML injection issue involving an     ActionScript attribute. (CVE-2008-4823)

  - Multiple input validation errors could potentially lead     to execution of arbitrary code. (CVE-2008-4824)

ID	Name	Product	Family	Severity
4790	Mac OS X < 10.5.6 Multiple Vulnerabilities	Nessus Network Monitor	Generic	critical
4789	Mac OS X < 10.5.6 Multiple Vulnerabilities	Nessus Network Monitor	Generic	critical
35111	Mac OS X 10.5.x < 10.5.6 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
35110	Mac OS X Multiple Vulnerabilities (Security Update 2008-008)	Nessus	MacOS X Local Security Checks	critical
4760	Adobe AIR APSB08-23 / APSB08-22 / APSB08-20 / APSB08-18 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
34815	Adobe AIR < 1.5 Multiple Vulnerabilities (APSB08-23)	Nessus	Windows	high
4746	Flash Player APSB08-18 / APSB08-20 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	medium
34741	Flash Player < 9.0.151.0 / 10.0.12.36 Multiple Vulnerabilities (APSB08-18 / APSB08-20 / APSB08-22)	Nessus	Windows	high
800794	Mac OS X < 10.5.6 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection	high

Detections

Analytics

CVE-2008-4820

high

Tenable Plugins

critical

critical

critical

critical

high

high

medium

high

high