Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2459.

The remote Solaris system is missing necessary patches to address security updates :

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2451, CVE-2011-2452, CVE-2011-2453,     CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2445)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (heap memory corruption)     via unspecified vectors. (CVE-2011-2450)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2452, CVE-2011-2453,     CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2451)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2453,     CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2452)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2453)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2455, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2454)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2459, and     CVE-2011-2460. (CVE-2011-2455)

  - Buffer overflow in Adobe Flash Player before 10.3.183.11     and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux,     and Solaris and before 11.1.102.59 on Android, and Adobe     AIR before 3.1.0.4880, allows attackers to execute     arbitrary code via unspecified vectors. (CVE-2011-2456)

  - Stack-based buffer overflow in Adobe Flash Player before     10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac     OS X, Linux, and Solaris and before 11.1.102.59 on     Android, and Adobe AIR before 3.1.0.4880, allows     attackers to execute arbitrary code via unspecified     vectors. (CVE-2011-2457)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, when Internet Explorer is used, allows     remote attackers to bypass the cross-domain policy via a     crafted web site. (CVE-2011-2458)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and     CVE-2011-2460. (CVE-2011-2459)

  - Adobe Flash Player before 10.3.183.11 and 11.x before     11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and     before 11.1.102.59 on Android, and Adobe AIR before     3.1.0.4880, allows attackers to execute arbitrary code     or cause a denial of service (memory corruption) via     unspecified vectors, a different vulnerability than     CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and     CVE-2011-2459. (CVE-2011-2460)

flash-player update to version 11.1.102.55 to fix the following critical security issues :

CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460

This update provides flash-player 11.1.102.55, which files the following critical security issues :

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2445).

  - This update resolves a heap corruption vulnerability     that could lead to code execution (CVE-2011-2450).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2451).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2452).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2453).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2454).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2455).

  - This update resolves a buffer overflow vulnerability     that could lead to code execution (CVE-2011-2456).

  - This update resolves a stack overflow vulnerability that     could lead to code execution (CVE-2011-2457).

  - This update resolves a vulnerability that could lead to     a cross-domain policy bypass (Internet Explorer-only)     (CVE-2011-2458).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2459).

  - This update resolves a memory corruption vulnerability     that could lead to code execution (CVE-2011-2460).

The remote host is affected by the vulnerability described in GLSA-201204-07 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open a specially crafted SWF       file, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition. Furthermore,       a remote attacker may be able to bypass intended access restrictions,       bypass cross-domain policy, inject arbitrary web script, or obtain       sensitive information.
  Workaround :

    There is no known workaround at this time.

The version of HP Systems Insight Manager installed on the remote Windows host is affected by vulnerabilities in the following components :

  - TLS and SSL protocols
  - Apache Tomcat
  - Java
  - Flash Player
  - BlazeDS/GraniteDS
  - Adobe LiveCycle
  - Adobe Flex SDK
  - Systems Insight Manager

flash-player update to version 11.1.102.55 to fix the following critical

flash-player update to version 11.1.102.55 to fix the following critical security issues :

CVE-2011-2445 / CVE-2011-2450 / CVE-2011-2451 / CVE-2011-2452 / CVE-2011-2453 / CVE-2011-2454 / CVE-2011-2455 / CVE-2011-2456 / CVE-2011-2457 / CVE-2011-2458 / CVE-2011-2459 / CVE-2011-2460

The version of Adobe Reader installed on the remote Mac OS X host is prior or equal to 10.1.1 or 9.4.6. It is, therefore, affected by a memory corruption issue related to the Universal 3D (U3D) file format.
A remote attacker can exploit this, by convincing a user to view a maliciously crafted PDF file, to cause an application crash or to execute arbitrary code.

Note that the Adobe Reader X user-specific option to use 'Protected Mode' prevents an exploit of this kind from being executed, but Nessus cannot test for this configuration option.

According to its version, the instance of Adobe AIR installed on the remote Mac OS X host is 3.0 or earlier.  It is therefore reportedly affected by several critical vulnerabilities :

  - Several unspecified memory corruption errors     exist that could lead to code execution.
    (CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455,     CVE-2011-2459, CVE-2011-2460)

  - An unspecified heap corruption error exists that could     lead to code execution. (CVE-2011-2450)

  - An unspecified buffer overflow error exists that could     lead to code execution. (CVE-2011-2456)

  - An unspecified stack overflow error exists that could     lead to code execution. (CVE-2011-2457)

According to its version, the instance of Adobe AIR installed on the remote Windows host is 3.0 or earlier and is reportedly affected by several critical vulnerabilities :

  - Several unspecified memory corruption errors     exist that could lead to code execution.
    (CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455,     CVE-2011-2459, CVE-2011-2460)

  - An unspecified heap corruption error exists that could     lead to code execution. (CVE-2011-2450)

  - An unspecified buffer overflow error exists that could     lead to code execution. (CVE-2011-2456)

  - An unspecified stack overflow error exists that could     lead to code execution. (CVE-2011-2457)

  - An unspecified error related to Internet Explorer can     allow cross-domain policy violations. (CVE-2011-2458)

By tricking a user on the affected system into opening a specially crafted document with Flash content, an attacker could leverage these vulnerabilities to execute arbitrary code remotely on the system subject to the user's privileges.

Versions of Flash Player earlier than 10.3.183.11 / 11.1.102.55 are potentially affected by multiple vulnerabilities :

  - Several unspecified memory corruption errors exist that could lead to code execution. (CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, CVE-2011-2460)
  - An unspecified heap corruption error exists that could lead to code execution. (CVE-2011-2450)
  - An unspecified buffer overflow error exists that could lead to code execution. (CVE-2011-2456)
  - An unspecified stack overflow error exists that could lead to code execution. (CVE-2011-2457)
  - An unspecified error related to Internet Explorer can allow cross-domain policy violations. (CVE-2011-2458)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is 10.x equal to or earlier than 10.3.183.10 or 11.x equal to or earlier than 11.0.1.152.  It is therefore reportedly affected by several critical vulnerabilities :

  - Several unspecified memory corruption errors     exist that could lead to code execution.
    (CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455,     CVE-2011-2459, CVE-2011-2460)

  - An unspecified heap corruption error exists that could     lead to code execution. (CVE-2011-2450)

  - An unspecified buffer overflow error exists that could     lead to code execution. (CVE-2011-2456)

  - An unspecified stack overflow error exists that could     lead to code execution. (CVE-2011-2457)

According to its version, the instance of Flash Player installed on the remote Windows host is 10.x equal to or earlier than 10.3.183.10 or 11.x equal to or earlier than 11.0.1.152.  It is, therefore, reportedly affected by several critical vulnerabilities :

  - Several unspecified memory corruption errors     exist that could lead to code execution.     (CVE-2011-2445, CVE-2011-2451, CVE-2011-2452,     CVE-2011-2453, CVE-2011-2454, CVE-2011-2455,     CVE-2011-2459, CVE-2011-2460)

  - An unspecified heap corruption error exists that could     lead to code execution. (CVE-2011-2450)

  - An unspecified buffer overflow error exists that could     lead to code execution. (CVE-2011-2456)

  - An unspecified stack overflow error exists that could     lead to code execution. (CVE-2011-2457)

  - An unspecified error related to Internet Explorer can     allow cross-domain policy violations. (CVE-2011-2458)

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:1445 advisory.

    The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash     Player web browser plug-in.

    This update fixes multiple vulnerabilities in Adobe Flash Player. These     vulnerabilities are detailed on the Adobe security page APSB11-28, listed     in the References section.

    Multiple security flaws were found in the way flash-plugin displayed     certain SWF content. An attacker could use these flaws to create a     specially-crafted SWF file that would cause flash-plugin to crash or,     potentially, execute arbitrary code when the victim loaded a page     containing the specially-crafted SWF content. (CVE-2011-2445,     CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454,     CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2459, CVE-2011-2460)

    All users of Adobe Flash Player should install this updated package, which     upgrades Flash Player to version 10.3.183.11.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Adobe Product Security Incident Response Team reports :

Critical vulnerabilities have been identified in Adobe Flash Player 11.0.1.152 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 11.0.1.153 and earlier versions for Android.

In addition a patch was released for users of flash10.

ID	Name	Product	Family	Severity
80611	Oracle Solaris Third-Party Patch Update : flash (multiple_vulnerabilities_in_adobe_flashplayer4)	Nessus	Solaris Local Security Checks	critical
75840	openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-2)	Nessus	SuSE Local Security Checks	critical
75839	openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-1)	Nessus	SuSE Local Security Checks	critical
75502	openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-1)	Nessus	SuSE Local Security Checks	critical
74525	openSUSE Security Update : flash-player (openSUSE-2011-4)	Nessus	SuSE Local Security Checks	critical
59623	GLSA-201204-07 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
59684	HP Systems Insight Manager < 7.0 Multiple Vulnerabilities	Nessus	Windows	critical
57195	SuSE 10 Security Update : flash-player (ZYPP Patch Number 7832)	Nessus	SuSE Local Security Checks	critical
57102	SuSE 11.1 Security Update : flash-player (SAT Patch Number 5413)	Nessus	SuSE Local Security Checks	critical
57044	Adobe Reader <= 10.1.1 / 9.4.6 U3D Memory Corruption (APSA11-04, APSB11-28, APSB11-30, APSB12-01) (Mac OS X)	Nessus	MacOS X Local Security Checks	critical
56962	Adobe AIR for Mac <= 3.0 Multiple Vulnerabilities (APSB11-28)	Nessus	MacOS X Local Security Checks	high
56959	Adobe AIR <= 3.0 Multiple Vulnerabilities (APSB11-28)	Nessus	Windows	critical
6097	Flash Player < 10.3.183.11 / 11.1.102.55 Multiple Vulnerabilities (APSB11-28)	Nessus Network Monitor	Web Clients	high
56875	Flash Player for Mac <= 10.3.183.10 / 11.0.1.152 Multiple Vulnerabilities (APSB11-28)	Nessus	MacOS X Local Security Checks	high
56874	Flash Player <= 10.3.183.10 / 11.0.1.152 Multiple Vulnerabilities (APSB11-28)	Nessus	Windows	high
56811	RHEL 5 / 6 : flash-plugin (RHSA-2011:1445)	Nessus	Red Hat Local Security Checks	high
56803	FreeBSD : linux-flashplugin -- multiple vulnerabilities (0e8e1212-0ce5-11e1-849b-003067b2972c)	Nessus	FreeBSD Local Security Checks	critical

Detections

Analytics

CVE-2011-2460

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high

critical

high

high

high

high

critical