Adobe Product Security Incident Response Team reports :

Critical vulnerabilities have been identified in Adobe Flash Player version 10.0.32.18 and earlier. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system.

The remote host is running a version of Mac OS X 10.6 or 10.5 that does not have Security Update 2010-001 applied.

This security update contains fixes for the following products :

  - CoreAudio
  - CUPS
  - Flash Player plug-in
  - ImageIO
  - Image RAW
  - OpenSSL

Specially crafted Flash (SWF) files can cause overflows in flash-player. Attackers could potentially exploit that to execute arbitrary code (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798,CVE-2009-3799, CVE-2009-3800, CVE-2009-3951)

The remote Windows host contains a version of Adobe Flash Player that is earlier than 9.0.260 or 10.0.42.34.  Such versions are potentially affected by multiple vulnerabilities :

  - A vulnerability in the parsing of JPEG data could lead     to code execution. (CVE-2009-3794)

  - A data injection vulnerability could lead to code     execution. (CVE-2009-3796)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2009-3797)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2009-3798)

  - An integer overflow vulnerability could lead to code     execution. (CVE-2009-3799) 

  - Multiple crash vulnerabilities could lead to code     execution. (CVE-2009-3800)

  - A Windows-only local file name access vulnerability     could lead to information disclosure. (CVE-2009-3591)

Specially crafted Flash (SWF) files can cause overflows in flash-player. Attackers could potentially exploit that to execute arbitrary code. (CVE-2009-3794 / CVE-2009-3796 / CVE-2009-3797 / CVE-2009-3798 / CVE-2009-3799 / CVE-2009-3800 / CVE-2009-3951)

Specially crafted Flash (SWF) files can cause overflows in flash-player. Attackers could potentially exploit that to execute arbitrary code (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798,CVE-2009-3799, CVE-2009-3800, CVE-2009-3951)

flash-player was upgraded to version 10 to fix those problems.

The remote Windows host contains a version of Adobe AIR player that is earlier than 1.5.3.  Such versions are reportedly affected by multiple vulnerabilities : 

  - A vulnerability in the parsing of JPEG data that could potentially lead to code execution. (CVE-2009-3794)

  - A data injection vulnerability that could potentially lead to code execution. (CVE-2009-3796)

  - A memory corruption vulnerability that could potentially lead to code execution. (CVE-2009-3797)

  - A memory corruption vulnerability that could potentially lead to code execution. (CVE-2009-3798)

  - An integer overflow vulnerability that could potentially lead to code execution. (CVE-2009-3799)

  - Multiple crash vulnerabilities that could potentially lead to code execution. (CVE-2009-3800)

  - A Windows-only local file name access vulnerability in the Flash Player ActiveX control that could potentially lead to information disclosure. (CVE-2009-3951)

ID	Name	Product	Family	Published	Updated	Severity
43093	FreeBSD : linux-flashplugin -- multiple vulnerabilities (3c1a672e-e508-11de-9f4a-001b2134ef46)	Nessus	FreeBSD Local Security Checks	12/10/2009	1/6/2021	high
44095	Mac OS X Multiple Vulnerabilities (Security Update 2010-001)	Nessus	MacOS X Local Security Checks	1/20/2010	5/28/2024	critical
43381	openSUSE Security Update : flash-player (flash-player-1707)	Nessus	SuSE Local Security Checks	12/22/2009	1/14/2021	high
43068	Flash Player < 9.0.260 / 10.0.42.34 Multiple Vulnerabilities (APSB09-19)	Nessus	Windows	12/9/2009	4/11/2022	high
43384	openSUSE Security Update : flash-player (flash-player-1707)	Nessus	SuSE Local Security Checks	12/22/2009	1/14/2021	high
43387	SuSE 11 Security Update : flash-player (SAT Patch Number 1698)	Nessus	SuSE Local Security Checks	12/22/2009	1/14/2021	high
51732	SuSE 10 Security Update : flash-player (ZYPP Patch Number 6766)	Nessus	SuSE Local Security Checks	1/27/2011	1/14/2021	high
43855	openSUSE Security Update : flash-player (flash-player-1769)	Nessus	SuSE Local Security Checks	1/12/2010	1/14/2021	high
51733	SuSE 10 Security Update : flash-player (ZYPP Patch Number 6769)	Nessus	SuSE Local Security Checks	1/27/2011	1/14/2021	high
5256	Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)	Nessus Network Monitor	Web Clients	12/9/2009	3/6/2019	medium

Detections

Analytics

Plugins Search

high

critical

high

high

high

high

high

high

high

medium