Adobe Flash Player before 10.3.183.86 and 11.x before 11.7.700.202 on Windows and Mac OS X, before 10.3.183.86 and 11.x before 11.2.202.285 on Linux, before 11.1.111.54 on Android 2.x and 3.x, and before 11.1.115.58 on Android 4.x; Adobe AIR before 3.7.0.1860; and Adobe AIR SDK & Compiler before 3.7.0.1860 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, and CVE-2013-3335.

flash-player was updated to security update to 11.2.202.285

  - APSB13-14, CVE-2013-2728, CVE-2013-3324, CVE-2013-3325,     CVE-2013-3326, CVE-2013-3327, CVE-2013-3328,     CVE-2013-3329, CVE-2013-3330, CVE-2013-3331,     CVE-2013-3332, CVE-2013-3333, CVE-2013-3334,     CVE-2013-3335

The mobile device uses a version of BlackBerry 10 OS that is older than version 10.2.0.1443. It is, therefore, affected by multiple vulnerabilities related to Adobe Flash Player including memory corruption vulnerabilities that could allow arbitrary, remote code execution.

Note that this plugin has relied solely on the version of the installed OS.

The remote host is affected by the vulnerability described in GLSA-201309-06 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple unspecified vulnerabilities have been discovered in Adobe Flash       Player. Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open specially crafted SWF       content, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition. Furthermore,       a remote attacker may be able to bypass access restrictions.
  Workaround :

    There is no known workaround at this time.

Versions of Adobe AIR prior to 3.7.0.1860 are outdated and thus unpatched for several memory corruption errors that could lead to remote code execution.

Adobe flash-player has been updated to 11.2.202.285 security update, which fixes various remote code execution problems and other security issues.

Some more details can be found on:
https://www.adobe.com/support/security/bulletins/apsb13-14.html

Adobe flash-player has been updated to 11.2.202.285 security update which fixes various remote code execution problems and other security issues.

Some more details can be found on:
https://www.adobe.com/support/security/bulletins/apsb13-14.html

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

This update fixes multiple vulnerabilities in Adobe Flash Player.
These vulnerabilities are detailed in the Adobe Security bulletin APSB13-14, listed in the References section. Specially crafted SWF content could cause flash-plugin to crash or, potentially, execute arbitrary code when a victim loads a page containing the malicious SWF content. (CVE-2013-2728, CVE-2013-3324, CVE-2013-3325, CVE-2013-3326, CVE-2013-3327, CVE-2013-3328, CVE-2013-3329, CVE-2013-3330, CVE-2013-3331, CVE-2013-3332, CVE-2013-3333, CVE-2013-3334, CVE-2013-3335)

All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.285.

Adobe reports :

These updates address vulnerabilities that could cause a crash and potentially allow an attacker to take control of the affected system.

The remote host is missing KB2837385.  It may, therefore, potentially affected by several memory corruption related to the installed version of the Adobe Flash ActiveX control that could lead to code execution.

According to its version, the instance of Flash Player installed on the remote Mac OS X host is 11.x equal or prior to 11.7.700.169, or 10.x equal or prior to 10.3.183.75.  It is, therefore, potentially affected by multiple memory corruption errors that could lead to code execution.

According to its version, the instance of Adobe AIR 3.x on the remote Mac OS X host is 3.7.0.1530 or earlier.  It is, therefore, reportedly affected by multiple memory corruption errors that could lead to code execution.

According to its version, the instance of Flash Player installed on the remote Windows host is 11.x equal or prior to 11.7.700.169, or 10.x equal or prior to 10.3.183.75.  It is, therefore, potentially affected by several memory corruption errors that could lead to code execution.

According to its version, the instance of Adobe AIR on the remote Windows host is 3.7.0.1530 or earlier.  It is, therefore, potentially affected by several memory corruption errors that could lead to code execution.

The remote host has Adobe Flash Player installed. Versions of Flash Player 11.x equal to or earlier than 11.7.700.169, or 10.x equal to or earlier than 10.3.183.75 are affected by multiple vulnerabilities. It is therefore, potentially affected by several memory corruption errors that could lead to code execution.

ID	Name	Product	Family	Severity
74998	openSUSE Security Update : flash-player (openSUSE-SU-2013:0954-1)	Nessus	SuSE Local Security Checks	critical
74125	BlackBerry < 10.2.0.1443 Multiple Vulnerabilities	Nessus	Mobile Devices	critical
69889	GLSA-201309-06 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
6829	Adobe AIR < 3.7.0.1860 Multiple Vulnerabilities (APSB13-14)	Nessus Network Monitor	Web Clients	high
66493	SuSE 10 Security Update : flash-player (ZYPP Patch Number 8570)	Nessus	SuSE Local Security Checks	critical
66492	SuSE 11.2 Security Update : flash-player (SAT Patch Number 7720)	Nessus	SuSE Local Security Checks	critical
66457	RHEL 5 / 6 : flash-plugin (RHSA-2013:0825)	Nessus	Red Hat Local Security Checks	critical
66456	FreeBSD : linux-flashplugin -- multiple vulnerabilities (a0c65049-bddd-11e2-a0f6-001060e06fd4)	Nessus	FreeBSD Local Security Checks	critical
66448	MS KB2837385: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10	Nessus	Windows	critical
66447	Flash Player for Mac <= 10.3.183.75 / 11.7.700.169 Multiple Vulnerabilities (APSB13-14)	Nessus	MacOS X Local Security Checks	critical
66446	Adobe AIR for Mac <= 3.7.0.1530 Multiple Vulnerabilities (APSB13-14)	Nessus	MacOS X Local Security Checks	critical
66445	Flash Player <= 10.3.183.75 / 11.7.700.169 Multiple Vulnerabilities (APSB13-14)	Nessus	Windows	critical
66444	Adobe AIR <= 3.7.0.1530 Multiple Vulnerabilities (APSB13-14)	Nessus	Windows	critical
6821	Flash Player <= 10.3.183.75 / 11.7.700.169 Multiple Vulnerabilities (APSB13-14)	Nessus Network Monitor	Web Clients	high

Detections

Analytics

CVE-2013-2728

high

Tenable Plugins

critical

critical

critical

high

critical

critical

critical

critical

critical

critical

critical

critical

critical

high