The remote Windows host contains a version of Adobe Flash Player 9.x before 9.0.289 or 10.x earlier than 10.1.102.64.  Such versions are potentially affected by multiple vulnerabilities :

  - A memory corruption vulnerability exists that could lead     to code execution.  Note that there are reports that     this is being actively exploited in the wild.     (CVE-2010-3654)

  - An input validation issue exists that could lead to a     bypass of cross-domain policy file restrictions with     certain server encodings. (CVE-2010-3636)

  - A memory corruption vulnerability exists in the ActiveX     component. (CVE-2010-3637)

  - An unspecified issue exists which could lead to a     denial of service or potentially arbitrary code     execution. (CVE-2010-3639)

  - Multiple memory corruption issues exist that could lead     to arbitrary code execution. (CVE-2010-3640,     CVE-2010-3641, CVE-2010-3642, CVE-2010-3643,     CVE-2010-3644, CVE-2010-3645, CVE-2010-3646,     CVE-2010-3647, CVE-2010-3648, CVE-2010-3649,     CVE-2010-3650, CVE-2010-3652)     
  - A library-loading vulnerability could lead to code     execution. (CVE-2010-3976)

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue.

CVE-2010-3636 CVE-2010-3637 CVE-2010-3638 CVE-2010-3639 CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650 CVE-2010-3651 CVE-2010-3652 CVE-2010-3654 CVE-2010-3976

The remote Windows host contains a version of Adobe AIR that is earlier than 2.5.1.  Such versions are affected by multiple vulnerabilities:

  - An error exists in the validation of input and, with     certain server encodings, lead to a violation of cross-     domain policy file restrictions. (CVE-2010-3636)

  - An unspecified error exists which can lead to a denial     of service. (CVE-2010-3639)

  - An error exists in the library loading logic and can     lead to arbitrary code execution. (CVE-2010-3976)

  - There exist multiple memory corruption vulnerabilities     which can lead to arbitrary code execution.
    (CVE-2010-3637, CVE-2010-3640, CVE-2010-3641,     CVE-2010-3642, CVE-2010-3643, CVE-2010-3644,     CVE-2010-3645, CVE-2010-3646, CVE-2010-3647,     CVE-2010-3648, CVE-2010-3649, CVE-2010-3650,     CVE-2010-3652, CVE-2010-3654)

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue.

The version of Adobe Reader installed on the remote host is earlier than 9.4.1.  Such versions are reportedly affected by multiple vulnerabilities :

  - A memory corruption vulnerability exists that could lead     to code execution.  Note that this issue does not affect     Adobe Reader 8.x.  (CVE-2010-3654)

  - An input validation issue exists that could lead to a     bypass of cross-domain policy file restrictions with     certain server encodings. (CVE-2010-3636)

  - A memory corruption vulnerability exists in the ActiveX     component. (CVE-2010-3637)

  - An unspecified issue exists which could lead to a     denial of service or potentially arbitrary code     execution. (CVE-2010-3639)

  - Multiple memory corruption issues exist that could lead     to arbitrary code execution. (CVE-2010-3640,     CVE-2010-3641, CVE-2010-3642, CVE-2010-3643,     CVE-2010-3644, CVE-2010-3645, CVE-2010-3646,     CVE-2010-3647, CVE-2010-3648, CVE-2010-3649,     CVE-2010-3650, CVE-2010-3652)     
  - A library-loading vulnerability could lead to code     execution. (CVE-2010-3976)

  - A memory corruption vulnerability exists that could lead     to code execution. (CVE-2010-4091)

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.5.

Mac OS X 10.6.5 contains security fixes for the following products :

  - AFP Server
  - Apache mod_perl
  - Apache
  - AppKit
  - ATS
  - CFNetwork
  - CoreGraphics
  - CoreText
  - CUPS
  - Directory Services
  - diskdev_cmds
  - Disk Images
  - Flash Player plug-in
  - gzip
  - Image Capture
  - ImageIO
  - Image RAW
  - Kernel
  - MySQL
  - neon
  - Networking
  - OpenLDAP
  - OpenSSL
  - Password Server
  - PHP
  - Printing
  - python
  - QuickLook
  - QuickTime
  - Safari RSS
  - Time Machine
  - Wiki Server
  - X11
  - xar

The version of Adobe Acrobat 9.x installed on the remote host is earlier than 9.4.1.  Such versions are reportedly affected by multiple vulnerabilities :

  - A memory corruption vulnerability exists that could lead     to code execution.  Note that this issue does not affect     Adobe Acrobat 8.x.  (CVE-2010-3654)

  - An input validation issue exists that could lead to a     bypass of cross-domain policy file restrictions with     certain server encodings. (CVE-2010-3636)

  - A memory corruption vulnerability exists in the ActiveX     component. (CVE-2010-3637)

  - An unspecified issue exists which could lead to a     denial of service or potentially arbitrary code     execution. (CVE-2010-3639)

  - Multiple memory corruption issues exist that could lead     to arbitrary code execution. (CVE-2010-3640,     CVE-2010-3641, CVE-2010-3642, CVE-2010-3643,     CVE-2010-3644, CVE-2010-3645, CVE-2010-3646,     CVE-2010-3647, CVE-2010-3648, CVE-2010-3649,     CVE-2010-3650, CVE-2010-3652)     
  - A library-loading vulnerability could lead to code     execution. (CVE-2010-3976)

The remote host is affected by the vulnerability described in GLSA-201101-09 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities were discovered in Adobe Flash Player. For     further information please consult the CVE entries and the Adobe     Security Bulletins referenced below.
  Impact :

    A remote attacker could entice a user to open a specially crafted SWF     file, possibly resulting in the execution of arbitrary code with the     privileges of the user running the application, or a Denial of Service.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-007 applied. 

This security update contains fixes for the following products :

  - AFP Server
  - Apache mod_perl
  - ATS
  - CFNetwork
  - CoreGraphics
  - CoreText
  - CUPS
  - Directory Services
  - diskdev_cmds
  - Disk Images
  - Flash Player plug-in
  - gzip
  - ImageIO
  - Image RAW
  - MySQL
  - Password Server
  - PHP
  - Printing
  - python
  - QuickLook
  - Safari RSS
  - Wiki Server
  - X11

The remote host has Adobe Flash Player installed. Versions of Flash Player 9.x earlier than 9.0.289 and 10.x earlier than 10.1.102.64 are potentially affected by multiple vulnerabilities :

  - A memory corruption vulnerability exists that could lead to code execution.  Note that there are reports that this is being actively exploited in the wild. (CVE-2010-3654)
  - An input validation issue exists that could lead to a bypass of cross-domain policy file restrictions with certain server encodings. (CVE-2010-3636)
  - A memory corruption vulnerability exists in the ActiveX component. (CVE-2010-3637)
  - An unspecified information disclosure vulnerability exists.  Note that this issue only affects Flash Player on Safari. (CVE-2010-3638)
  - An unspecified issue exists which could lead to a denial-of-service or potentially arbitrary code execution. (CVE-2010-3639)
  - Multiple memory corruption issues exists that could lead to arbitrary code execution. (CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, CVE-2010-3652)
  - A library-loading vulnerability could lead to code execution. (CVE-2010-3639)

Versions of Mac OS X 10.6 earlier than 10.6.5 are potentially affected by multiple vulnerabilities.  Mac OS X 10.6.5 contains security fixes for the following products :

  - AFP Server

  - Apache mod_perl

  - Apache

  - AppKit

  - ATS

  - CFNetwork

  - CoreGraphics

  - CoreText

  - CUPS

  - Directory Services

  - diskdev_cmds

Disk Images

  - Flash Player plug-in

  - gzip

  - Image Capture

  - ImageIO

  - Image RAW

  - Kernel

  - MySQL

  - neon

  - Networking

  - OpenLDAP

  - OpenSSL

  - Password Server

  - PHP

  - Printing

  - python

  - QuickLook

  - QuickTime

  - Safari RSS

  - Time Machine

  - Wiki Server

  - X11

  - xar

ID	Name	Product	Family	Published	Updated	Severity
50493	Flash Player < 9.0.289 / 10.1.102.64 Multiple Vulnerabilities (APSB10-26)	Nessus	Windows	11/5/2010	4/11/2022	high
75493	openSUSE Security Update : flash-player (flash-player-3474)	Nessus	SuSE Local Security Checks	6/13/2014	1/14/2021	high
50604	Adobe AIR < 2.5.1 Multiple Vulnerabilities (APSB10-26)	Nessus	Windows	11/15/2010	4/11/2022	high
53658	openSUSE Security Update : flash-player (flash-player-3474)	Nessus	SuSE Local Security Checks	5/5/2011	1/14/2021	high
50904	SuSE 11 / 11.1 Security Update : flash-player (SAT Patch Numbers 3475 / 3477)	Nessus	SuSE Local Security Checks	12/2/2010	1/14/2021	high
53718	openSUSE Security Update : flash-player (flash-player-3474)	Nessus	SuSE Local Security Checks	5/5/2011	1/14/2021	high
50614	Adobe Reader < 9.4.1 Multiple Vulnerabilities (APSB10-28)	Nessus	Windows	11/16/2010	11/15/2018	high
50548	Mac OS X 10.6.x < 10.6.5 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	11/10/2010	5/28/2024	critical
50613	Adobe Acrobat 9.x < 9.4.1 Multiple Vulnerabilities (APSB10-28)	Nessus	Windows	11/16/2010	5/31/2024	high
51658	GLSA-201101-09 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	1/24/2011	6/8/2022	high
50549	Mac OS X Multiple Vulnerabilities (Security Update 2010-007)	Nessus	MacOS X Local Security Checks	11/10/2010	5/28/2024	critical
5699	Flash Player < 9.0.289 / 10.1.102.64 Multiple Vulnerabilities (APSB10-26)	Nessus Network Monitor	Web Clients	11/5/2010	3/6/2019	medium
5705	Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities	Nessus Network Monitor	Generic	11/11/2010	3/6/2019	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

critical

high

high

critical

medium

critical