Adobe reports :

Multiple input validation errors have been identified in Flash Player 8.0.24.0 and earlier versions that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the user?s web browser, email client, or other applications that include or reference the Flash Player. (CVE-2006-3311, CVE-2006-3587, CVE-2006-3588)

These updates include changes to prevent circumvention of the 'allowScriptAccess' option. (CVE-2006-4640)

The remote host is running a version of Mac OS X 10.3 which does not have the security update 2006-006 applied.

Security Update 2006-006 contains several security fixes for the following programs :

 - CFNetwork
 - Flash Player
 - QuickDraw Manager
 - SASL
 - WebCore

Multiple input validation errors have been identified in Flash Player that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the user's web browser, email client, or other applications that include or reference the Flash Player.
(CVE-2006-3311, CVE-2006-3587, CVE-2006-3588)

These updates include changes to prevent circumvention of the 'allowScriptAccess' option. (CVE-2006-4640)

Multiple input validation errors have been identified in Flash Player that could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the user's web browser, email client, or other applications that include or reference the Flash Player.
(CVE-2006-3311 / CVE-2006-3587 / CVE-2006-3588)

These updates include changes to prevent circumvention of the 'allowScriptAccess' option. (CVE-2006-4640)

According to its version number, the instance of Flash Player on the remote Windows host is affected by arbitrary code execution and denial of service issues.  By convincing a user to visit a site with a specially crafted SWF file, an attacker may be able to execute arbitrary code on the affected host or cause the web browser to crash.

The remote host is running a version of Mac OS X 10.4.x that is prior to 10.4.8.

Mac OS X 10.4.8 contains several security fixes for the following programs :

 - CFNetwork
 - Flash Player
 - ImageIO
 - Kernel
 - LoginWindow
 - Preferences
 - QuickDraw Manager
 - SASL
 - WebCore
 - Workgroup Manager

An updated Adobe Flash Player package that fixes security issues is now available.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

The flash-plugin package contains a Firefox-compatible Adobe Flash Player browser plug-in.

Security issues were discovered in the Adobe Flash Player. It may be possible to execute arbitrary code on a victim's machine if the victim opens a malicious Adobe Flash file. (CVE-2006-3311, CVE-2006-3587, CVE-2006-3588)

Users of Adobe Flash Player should upgrade to this updated package, which contains version 7.0.68 and is not vulnerable to this issue.

Red Hat would like to thank Adobe for notifying us of these issues.

The remote host is running a version of Mac OS X 10.4 that is older than version 10.4.8.  Mac OS X 10.4.8 contains several security fixes for the following programs :
 - CFNetwork
 - Flash Player
 - ImageIO
 - Kernel
 - LoginWindow
 - Preferences
 - QuickDraw Manager
 - SASL
 - WebCore
 - Workgroup Manager

ID	Name	Product	Family	Published	Updated	Severity
22341	FreeBSD : linux-flashplugin7 -- arbitrary code execution vulnerabilities (7c75d48c-429b-11db-afae-000c6ec775d9)	Nessus	FreeBSD Local Security Checks	9/14/2006	1/6/2021	medium
22479	Mac OS X Multiple Vulnerabilities (Security Update 2006-006)	Nessus	MacOS X Local Security Checks	9/29/2006	5/28/2024	critical
27219	openSUSE 10 Security Update : flash-player (flash-player-2072)	Nessus	SuSE Local Security Checks	10/17/2007	1/14/2021	medium
29432	SuSE 10 Security Update : flash-player (ZYPP Patch Number 2065)	Nessus	SuSE Local Security Checks	12/13/2007	1/14/2021	medium
22056	Flash Player Multiple Vulnerabilities (APSB06-11)	Nessus	Windows	7/17/2006	4/7/2022	critical
22476	Mac OS X 10.4.x < 10.4.8 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	9/29/2006	5/28/2024	critical
63833	RHEL 3 / 4 : flash-plugin (RHSA-2006:0674)	Nessus	Red Hat Local Security Checks	1/24/2013	1/14/2021	medium
3757	Mac OS X < 10.4.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	9/30/2006	3/6/2019	medium

Detections

Analytics

Plugins Search

medium

critical

medium

medium

critical

critical

medium

medium