MS KB2982794: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

critical Nessus Plugin ID 77170

Language:

Synopsis

The remote host has an ActiveX control installed that is affected by multiple vulnerabilities.

Description

The remote host is missing KB2982794. It is, therefore, affected by the following vulnerabilities :

- A use-after-free error exits that allows code execution. (CVE-2014-0538)

- An unspecified security bypass error exists.
(CVE-2014-0541)

- Multiple errors exist related to memory leaks that can be used to bypass memory address randomization.
(CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545)

Solution

Install Microsoft KB2982794.

Plugin Details

Severity: Critical

ID: 77170

File Name: smb_kb2982794.nasl

Version: 1.10

Type: local

Agent: windows

Family: Windows

Published: 8/12/2014

Updated: 11/25/2019

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.9

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2014-0545

Vulnerability Information

CPE: cpe:/o:microsoft:windows, cpe:/a:adobe:flash_player

Required KB Items: SMB/Registry/Enumerated, SMB/WindowsVersion

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 8/12/2014

Vulnerability Publication Date: 8/12/2014

Reference Information

CVE: CVE-2014-0538, CVE-2014-0540, CVE-2014-0541, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545

BID: 69190, 69191, 69192, 69194, 69195, 69196, 69197

MSKB: 2982794

Detections

Analytics