Detections
Analytics

SuSE 11 / 11.1 Security Update : flash-player (SAT Patch Numbers 3475 / 3477)

high Nessus Plugin ID 50904

Language:

Synopsis

The remote SuSE 11 host is missing a security update.

Description

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue.

Solution

Apply SAT patch number 3475 / 3477 as appropriate.

See Also

https://bugzilla.novell.com/show_bug.cgi?id=650145

http://support.novell.com/security/cve/CVE-2010-3636.html

http://support.novell.com/security/cve/CVE-2010-3637.html

http://support.novell.com/security/cve/CVE-2010-3638.html

http://support.novell.com/security/cve/CVE-2010-3639.html

http://support.novell.com/security/cve/CVE-2010-3640.html

http://support.novell.com/security/cve/CVE-2010-3641.html

http://support.novell.com/security/cve/CVE-2010-3642.html

http://support.novell.com/security/cve/CVE-2010-3643.html

http://support.novell.com/security/cve/CVE-2010-3644.html

http://support.novell.com/security/cve/CVE-2010-3645.html

http://support.novell.com/security/cve/CVE-2010-3646.html

http://support.novell.com/security/cve/CVE-2010-3647.html

http://support.novell.com/security/cve/CVE-2010-3648.html

http://support.novell.com/security/cve/CVE-2010-3649.html

http://support.novell.com/security/cve/CVE-2010-3650.html

http://support.novell.com/security/cve/CVE-2010-3651.html

http://support.novell.com/security/cve/CVE-2010-3652.html

http://support.novell.com/security/cve/CVE-2010-3654.html

http://support.novell.com/security/cve/CVE-2010-3976.html

Plugin Details

Severity: High

ID: 50904

File Name: suse_11_flash-player-101104.nasl

Version: 1.15

Type: local

Agent: unix

Published: 12/2/2010

Updated: 1/14/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.6

CVSS v2

Risk Factor: High

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:11:flash-player, cpe:/o:novell:suse_linux:11

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/4/2010

Exploitable With

CANVAS (CANVAS)

Core Impact

Metasploit (Adobe Flash Player "Button" Remote Code Execution)

Reference Information

CVE: CVE-2010-3636, CVE-2010-3637, CVE-2010-3638, CVE-2010-3639, CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, CVE-2010-3651, CVE-2010-3652, CVE-2010-3654, CVE-2010-3976