According to its version number, an instance of Flash Player on the remote Windows host is 9.0.124.0 or earlier.  Such versions are potentially affected by several vulnerabilities :

  - A potential port-scanning issue. (CVE-2007-4324)

  - Possible privilege escalation attacks against web     servers hosting Flash content and cross-domain policy     files.  (CVE-2007-6243)

  - Potential Clipboard attacks. (CVE-2008-3873)

  - FileReference upload and download APIs that don't     require user interaction. (CVE-2008-4401)

  - A 'Clickjacking' issue that could be abused by an     attacker to lure a web browser user into unknowingly     clicking on a link or dialog. (CVE-2008-4503)

  - A potential cross-site scripting vulnerability.     (CVE-2008-4818)

  - A potential issue that could be leveraged in to conduct     a DNS rebinding attack. (CVE-2008-4819)

  - An information disclosure issue affecting only the     ActiveX control. (CVE-2008-4820)

  - An information disclosure issue involving interpretation     of the 'jar:' protocol and affecting only the plugin for     Mozilla browsers. (CVE-2008-4821)

  - An issue with policy file interpretation could     potentially lead to bypass of a non-root domain policy.     (CVE-2008-4822)

  - A potential HTML injection issue involving an     ActionScript attribute. (CVE-2008-4823)

  - Multiple input validation errors could potentially lead     to execution of arbitrary code. (CVE-2008-4824)

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2008-008 applied. 

This security update contains fixes for the following products :

  - BOM
  - CoreGraphics
  - CoreServices
  - Flash Player Plug-in
  - Libsystem
  - network_cmds
  - UDF

According to its version number, an instance of Adobe AIR on the remote Windows host is 1.1 or earlier.  Such versions are potentially affected by several vulnerabilities (APSB08-23 / APSB08-22 / APSB08-20 / APSB08-18):

  - A potential port-scanning issue. (CVE-2007-4324)

  - Possible privilege escalation attacks against web     servers hosting Flash content and cross-domain policy     files.  (CVE-2007-6243)

  - Potential Clipboard attacks. (CVE-2008-3873)

  - FileReference upload and download APIs that don't     require user interaction. (CVE-2008-4401)

  - A potential cross-site scripting vulnerability.     (CVE-2008-4818)

  - A potential issue that could be leveraged to conduct     a DNS rebinding attack. (CVE-2008-4819)

  - An information disclosure issue affecting only the     ActiveX control. (CVE-2008-4820)

  - An information disclosure issue involving interpretation     of the 'jar:' protocol and affecting only the plugin for     Mozilla browsers. (CVE-2008-4821)

  - An issue with policy file interpretation could     potentially lead to bypass of a non-root domain policy.     (CVE-2008-4822)

  - A potential HTML injection issue involving an     ActionScript attribute. (CVE-2008-4823)

  - Multiple input validation errors could potentially lead     to execution of arbitrary code. (CVE-2008-4824)

  - An Adobe AIR application that loads data from an     untrusted source could allow an attacker to execute     untrusted JavaScript with elevated privileges.     (CVE-2008-5108)

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.6. 

Mac OS X 10.5.6 contains security fixes for the following products :

  - ATS
  - BOM
  - CoreGraphics
  - CoreServices
  - CoreTypes
  - Flash Player Plug-in
  - Kernel
  - Libsystem
  - Managed Client
  - network_cmds
  - Podcast Producer
  - UDF

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.6.  Mac OS X 10.5.6 contains security fixes for the following products : 

  - ATS
  - BOM
  - CoreGraphics
  - CoreServices
  - CoreTypes
  - Flash Player Plug-in
  - Kernel
  - Libsystem
  - Managed Client
  - network_cmds
  - Podcast Producer
  - UDF

According to its version number, an instance of Adobe AIR on the remote Windows host is 1.5 or earlier.  Such versions are potentially affected by several vulnerabilities : 

  - A potential port-scanning issue. (CVE-2007-4324)

  - Possible privilege escalation attacks against web servers hosting Flash content and cross-domain policy files.  (CVE-2007-6243)

  - Potential Clipboard attacks. (CVE-2008-3873)

  - FileReference upload and download APIs that don't require user interaction. (CVE-2008-4401)

  - A potential cross-site scripting vulnerability. (CVE-2008-4818)

  - A potential issue that could be leveraged to conduct a DNS rebinding attack. (CVE-2008-4819)

  - An information disclosure issue affecting only the ActiveX control. (CVE-2008-4820)

  - An information disclosure issue involving interpretation of the 'jar: ' protocol and affecting only the plugin for Mozilla browsers. (CVE-2008-4821)

  - An issue with policy file interpretation could potentially lead to bypass of a non-root domain policy. (CVE-2008-4822)

  - A potential HTML injection issue involving an ActionScript attribute. (CVE-2008-4823)

  - Multiple input validation errors could potentially lead to execution of arbitrary code. (CVE-2008-4824)

  - An Adobe AIR application that loads data from an untrusted source could allow an attacker to execute untrusted JavaScript with elevated privileges. (CVE-2008-5108)

According to its version number, an instance of Flash Player on the remote Windows host is 9.0.124.0 or earlier.  Such versions are potentially affected by several vulnerabilities : 

  - A potential port-scanning issue. (CVE-2007-4324)
  - Possible privilege escalation attacks against web servers hosting Flash content and cross-domain policy files. (CVE-2007-6243)
  - Potential Clipboard attacks. (CVE-2008-3873)
  - FileReference upload and download APIs that don't require user interaction. (CVE-2008-4401)
  - A 'Clickjacking' issue that could be abused by an attacker to lure a web browser user into unknowingly clicking on a link or dialog. (CVE-2008-4503)
  - A potential cross-site scripting vulnerability. (CVE-2008-4818)
  - A potential issue that could be leveraged to conduct a DNS rebinding attack. (CVE-2008-4819)
  - An information disclosure issue affecting only the ActiveX control. (CVE-2008-4820)
  - An information disclosure issue involving interpretation of the 'jar: ' protocol and affecting only the plugin for Mozilla browsers. (CVE-2008-4821)
  - An issue with policy file interpretation could potentially lead to bypass of a non-root domain policy. (CVE-2008-4822)
  - A potential HTML injection issue involving an ActionScript attribute. (CVE-2008-4823)

ID	Name	Product	Family	Published	Updated	Severity
34741	Flash Player < 9.0.151.0 / 10.0.12.36 Multiple Vulnerabilities (APSB08-18 / APSB08-20 / APSB08-22)	Nessus	Windows	11/11/2008	4/7/2022	high
35110	Mac OS X Multiple Vulnerabilities (Security Update 2008-008)	Nessus	MacOS X Local Security Checks	12/16/2008	5/28/2024	critical
34815	Adobe AIR < 1.5 Multiple Vulnerabilities (APSB08-23)	Nessus	Windows	11/18/2008	4/11/2022	high
35111	Mac OS X 10.5.x < 10.5.6 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	12/16/2008	5/28/2024	critical
4789	Mac OS X < 10.5.6 Multiple Vulnerabilities	Nessus Network Monitor	Generic	12/16/2008	3/6/2019	critical
4760	Adobe AIR APSB08-23 / APSB08-22 / APSB08-20 / APSB08-18 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	11/18/2008	3/6/2019	high
4790	Mac OS X < 10.5.6 Multiple Vulnerabilities	Nessus Network Monitor	Generic	12/16/2008	3/6/2019	critical
4746	Flash Player APSB08-18 / APSB08-20 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	11/12/2008	3/6/2019	medium
800794	Mac OS X < 10.5.6 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection			high

Detections

Analytics

Plugins Search

high

critical

high

critical

critical

high

critical

medium

high