This update of flash-player fixes multiple (unspecified) buffer overflows, memory corruptions and other security-related issues.

Flash Player was updated to 11.2.202.251 (bnc#788450), fixing severe security issues :

  - CVE-2012-5274, CVE-2012-5275, CVE-2012-5276,     CVE-2012-5277, CVE-2012-5278, CVE-2012-5279,     CVE-2012-5280

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:1431 advisory.

  - flash-plugin: multiple code-execution flaws (APSB12-24) (CVE-2012-5274, CVE-2012-5275, CVE-2012-5276,     CVE-2012-5277, CVE-2012-5278, CVE-2012-5279, CVE-2012-5280)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to its version, the instance of Flash Player installed on the remote Windows host is 11.x equal to or earlier than 11.4.402.287, or 10.x equal to or earlier than 10.3.183.29.  It is, therefore, potentially affected by multiple vulnerabilities :

  - Several unspecified issues exist that can lead to buffer     overflows and arbitrary code execution. (CVE-2012-5274,     CVE-2012-5275, CVE-2012-5276, CVE-2012-5277,     CVE-2012-5280)

  - An unspecified security bypass issue exists that can     lead to arbitrary code execution. (CVE-2012-5278)

  - An unspecified issue exists that can lead to memory     corruption and arbitrary code execution. (CVE-2012-5279)

The remote host is affected by the vulnerability described in GLSA-201309-06 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple unspecified vulnerabilities have been discovered in Adobe Flash       Player. Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to open specially crafted SWF       content, possibly resulting in execution of arbitrary code with the       privileges of the process or a Denial of Service condition. Furthermore,       a remote attacker may be able to bypass access restrictions.
  Workaround :

    There is no known workaround at this time.

According to its version, the instance of Adobe AIR on the remote Windows host is 3.4.0.2710 or earlier.  It is, therefore, reportedly affected by multiple vulnerabilities :

  - Several unspecified issues exist that can lead to buffer     overflows and arbitrary code execution. (CVE-2012-5274,     CVE-2012-5275, CVE-2012-5276, CVE-2012-5277,     CVE-2012-5280)

  - An unspecified security bypass issue exists that can     lead to arbitrary code execution. (CVE-2012-5278)

  - An unspecified issue exists that can lead to memory     corruption and arbitrary code execution. (CVE-2012-5279)

According to its version, the instance of Adobe AIR on the remote Mac OS X host is 3.4.0.2710 or earlier.  It is, therefore, reportedly affected by multiple vulnerabilities :

  - Several unspecified issues exist that can lead to buffer     overflows and arbitrary code execution. (CVE-2012-5274,     CVE-2012-5275, CVE-2012-5276, CVE-2012-5277,     CVE-2012-5280)

  - An unspecified security bypass issue exists that can     lead to arbitrary code execution. (CVE-2012-5278)

  - An unspecified issue exists that can lead to memory     corruption and arbitrary code execution. (CVE-2012-5279)

According to its version, the instance of Flash Player installed on the remote Mac OS X host is 11.x equal to or earlier than 11.4.402.287, or 10.x equal to or earlier than 10.3.183.29.  It is, therefore, potentially affected by multiple vulnerabilities :

  - Several unspecified issues exist that can lead to buffer     overflows and arbitrary code execution. (CVE-2012-5274,     CVE-2012-5275, CVE-2012-5276, CVE-2012-5277,     CVE-2012-5280)

  - An unspecified security bypass issue exists that can     lead to arbitrary code execution. (CVE-2012-5278)

  - An unspecified issue exists that can lead to memory     corruption and arbitrary code execution. (CVE-2012-5279)

Adobe reports :

These vulnerabilities could cause a crash and potentially allow an attacker to take control of the affected system.

ID	Name	Product	Family	Published	Updated	Severity
62935	SuSE 10 Security Update : flash-player (ZYPP Patch Number 8360)	Nessus	SuSE Local Security Checks	11/16/2012	1/19/2021	critical
74808	openSUSE Security Update : flash-player (openSUSE-SU-2013:0367-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	critical
62834	RHEL 5 / 6 : flash-plugin (RHSA-2012:1431)	Nessus	Red Hat Local Security Checks	11/7/2012	4/27/2024	high
62836	Flash Player <= 10.3.183.29 / 11.4.402.287 Multiple Vulnerabilities (APSB12-24)	Nessus	Windows	11/7/2012	4/11/2022	critical
69889	GLSA-201309-06 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	9/14/2013	9/17/2024	critical
62835	Adobe AIR 3.x <= 3.4.0.2710 Multiple Vulnerabilities (APSB12-24)	Nessus	Windows	11/7/2012	4/11/2022	critical
62837	Adobe AIR for Mac 3.x <= 3.4.0.2710 Multiple Vulnerabilities (APSB12-24)	Nessus	MacOS X Local Security Checks	11/7/2012	12/4/2019	critical
62838	Flash Player for Mac <= 10.3.183.29 / 11.4.402.287 Multiple Vulnerabilities (APSB12-24)	Nessus	MacOS X Local Security Checks	11/7/2012	12/4/2019	critical
62866	FreeBSD : linux-flashplugin -- multiple vulnerabilities (4b8b748e-2a24-11e2-bb44-003067b2972c)	Nessus	FreeBSD Local Security Checks	11/9/2012	1/6/2021	critical
64141	SuSE 11.2 Security Update : flash-player (SAT Patch Number 7038)	Nessus	SuSE Local Security Checks	1/25/2013	1/19/2021	critical

Detections

Analytics

Plugins Search

critical

critical

high

critical

critical

critical

critical

critical

critical

critical