Detections
Analytics
Adobe Shockwave Player <= 11.5.1.601 Multiple Vulnerabilities (APSB09-16) (Mac OS X)
high Nessus Plugin ID 80170
Language:
Synopsis
The remote Mac OS X host contains a web browser plugin that is affected by multiple vulnerabilities.Description
The remote Mac OS X host contains a version of Adobe Shockwave Player that is 11.5.1.601 or earlier. It is, therefore, affected by multiple vulnerabilities :- An invalid index vulnerability allows code execution.
(CVE-2009-3463)
- Invalid pointer vulnerabilities that allow code execution. (CVE-2009-3464, CVE-2009-3465)
- An invalid string length vulnerability allows code execution. (CVE-2009-3466)
- A boundary condition issue allows a denial of service.
(CVE-2009-3244)
Solution
Upgrade to Adobe Shockwave version 11.5.2.602 or later.See Also
http://www.adobe.com/support/security/bulletins/apsb09-16.html
Plugin Details
Severity: High
ID: 80170
File Name: macosx_shockwave_player_apsb09_16.nasl
Version: 1.6
Type: local
Agent: macosx
Family: MacOS X Local Security Checks
Published: 12/22/2014
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2009-3466
Vulnerability Information
CPE: cpe:/a:adobe:shockwave_player
Required KB Items: installed_sw/Shockwave Player, Host/MacOSX/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 11/3/2009
Vulnerability Publication Date: 11/3/2009
Reference Information
CVE: CVE-2009-3244, CVE-2009-3463, CVE-2009-3464, CVE-2009-3465, CVE-2009-3466
BID: 36905