10 - GLSA-201402-06

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	Adobe Flash Player: Multiple vulnerabilities

Informations
Name	GLSA-201402-06	First vendor Publication	2014-02-06
Vendor	Gentoo	Last vendor Modification	2014-02-06
Severity (Vendor)	Normal	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Synopsis

Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which could result in execution of arbitrary code.

Background

The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites.

Description

Multiple unspecified vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted SWF file using Adobe Flash Player, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Adobe Flash Player users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-plugins/adobe-flash-11.2.202.336"

References

[ 1 ] CVE-2013-5329 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5329
[ 2 ] CVE-2013-5330 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5330
[ 3 ] CVE-2013-5331 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5331
[ 4 ] CVE-2013-5332 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2013-5332
[ 5 ] CVE-2014-0491 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0491
[ 6 ] CVE-2014-0492 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0492
[ 7 ] CVE-2014-0497 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0497

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-201402-06.xml

Original Source

Url : http://security.gentoo.org/glsa/glsa-201402-06.xml

CWE : Common Weakness Enumeration

%	Id	Name
29 %	CWE-264	Permissions, Privileges, and Access Controls
29 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
29 %	CWE-94	Failure to Control Generation of Code ('Code Injection')
14 %	CWE-189	Numeric Errors (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:19802

Oval ID:	oval:org.mitre.oval:def:19802
Title:	Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows; Adobe AIR before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330
Description:	Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5330.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-5329	Version:	12
Platform(s):	Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Check the version of Adobe Flash Player Adobe Flash Player 11 is installed AND Determine the version of Adobe Flash Player is less than or equal 11.7.700.242 and is greater than or equal 11.0 or is less than or equal 11.9.900.117 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.7.700.242 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than or equal 11.7.700.242 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than or equal 11.9.900.117 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.9.900.117 AND Determine if the version of Adobe Flash Player is greater than or equal 11.8.0 OR Determine if the version of Adobe Air is less than or equal 3.9.0.1030 and is greater than or equal 3.0.0.408 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 3.9.0.1030 AND Determine if the version of Adobe Air is greater than or equal 3.0.0.408 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx 11 section Determine if the version of Flash.ocx is less than or equal 11.7.700.242 and is greater than or equal 11.0 Determine if the version of Flash.ocx is less than or equal 11.7.700.242 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Determine if the version of Flash.ocx is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Flash.ocx is less than or equal 11.9.900.170 AND Determine if the version of Flash.ocx is greater than or equal 11.8.0

Definition Id: oval:org.mitre.oval:def:20133

Oval ID:	oval:org.mitre.oval:def:20133
Title:	Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows; Adobe AIR before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329
Description:	Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-5330	Version:	10
Platform(s):	Microsoft Windows 8 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Check the version of Adobe Flash Player Adobe Flash Player 11 is installed AND Determine the version of Adobe Flash Player is less than or equal 11.7.700.242 and is greater than or equal 11.0 or is less than or equal 11.9.900.117 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.7.700.242 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than or equal 11.7.700.242 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than or equal 11.9.900.117 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.9.900.117 AND Determine if the version of Adobe Flash Player is greater than or equal 11.8.0 OR Determine if the version of Adobe Air is less than or equal 3.9.0.1030 and is greater than or equal 3.0.0.408 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 3.9.0.1030 AND Determine if the version of Adobe Air is greater than or equal 3.0.0.408 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx 11 section Determine if the version of Flash.ocx is less than or equal 11.7.700.242 and is greater than or equal 11.0 Determine if the version of Flash.ocx is less than or equal 11.7.700.242 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Determine if the version of Flash.ocx is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Flash.ocx is less than or equal 11.9.900.170 AND Determine if the version of Flash.ocx is greater than or equal 11.8.0

Definition Id: oval:org.mitre.oval:def:20714

Oval ID:	oval:org.mitre.oval:def:20714
Title:	RHSA-2013:1518: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1518-00 CVE-2013-5329 CVE-2013-5330	Version:	33
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	flash-plugin
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:11.2.202.327-1.el5 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 AND flash-plugin is earlier than 0:11.2.202.327-1.el6

Definition Id: oval:org.mitre.oval:def:20738

Oval ID:	oval:org.mitre.oval:def:20738
Title:	Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK and Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors
Description:	Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-5332	Version:	10
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Check the version of Adobe Flash Player Adobe Flash Player 11 is installed AND Determine the version of Adobe Flash Player is less than or equal 11.7.700.257 and is greater than or equal 11.0 or is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.7.700.257 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.257 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than 11.9.900.170 AND Determine if the version of Adobe Flash Player is greater than or equal 11.8.0 OR Determine if the version of Adobe Air is less than or equal 3.9.0.1380 and is greater than or equal 3.0.0.408 Adobe AIR is installed AND Determine if the version of Adobe Air is less than 3.9.0.1380 AND Determine if the version of Adobe Air is greater than or equal 3.0.0.408 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx 11 section Determine if the version of Flash.ocx is less than or equal 11.7.700.257 and is greater than or equal 11.0 Determine if the version of Flash.ocx is less than 11.7.700.257 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Determine if the version of Flash.ocx is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Flash.ocx is less than 11.9.900.170 AND Determine if the version of Flash.ocx is greater than or equal 11.8.0

Definition Id: oval:org.mitre.oval:def:20871

Oval ID:	oval:org.mitre.oval:def:20871
Title:	Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK and Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion,"
Description:	Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow remote attackers to execute arbitrary code via crafted .swf content that leverages an unspecified "type confusion," as exploited in the wild in December 2013.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2013-5331	Version:	10
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Check the version of Adobe Flash Player Adobe Flash Player 11 is installed AND Determine the version of Adobe Flash Player is less than or equal 11.7.700.257 and is greater than or equal 11.0 or is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.7.700.257 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.257 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than 11.9.900.170 AND Determine if the version of Adobe Flash Player is greater than or equal 11.8.0 OR Determine if the version of Adobe Air is less than or equal 3.9.0.1380 and is greater than or equal 3.0.0.408 Adobe AIR is installed AND Determine if the version of Adobe Air is less than 3.9.0.1380 AND Determine if the version of Adobe Air is greater than or equal 3.0.0.408 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx 11 section Determine if the version of Flash.ocx is less than or equal 11.7.700.257 and is greater than or equal 11.0 Determine if the version of Flash.ocx is less than 11.7.700.257 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Determine if the version of Flash.ocx is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Flash.ocx is less than 11.9.900.170 AND Determine if the version of Flash.ocx is greater than or equal 11.8.0

Definition Id: oval:org.mitre.oval:def:21081

Oval ID:	oval:org.mitre.oval:def:21081
Title:	RHSA-2013:1818: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2013:1818-00 CVE-2013-5331 CVE-2013-5332	Version:	35
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	flash-plugin
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:11.2.202.332-1.el5 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 AND flash-plugin is earlier than 0:11.2.202.332-1.el6

Definition Id: oval:org.mitre.oval:def:22228

Oval ID:	oval:org.mitre.oval:def:22228
Title:	Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK and Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an "address leak."
Description:	Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an "address leak."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0492	Version:	9
Platform(s):	Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows 8 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Check the version of Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine the version of Adobe Flash Player is less than 11.7.700.260 and is greater than or equal 11.0 or is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than 11.7.700.260 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.260 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 AND Determine if the version of Adobe Flash Player is greater than or equal 11.8.0 OR Check the version of Adobe Flash Player 12 Adobe Flash Player 12 is installed AND Determine if the version of Adobe Flash Player is less than 12.0.0.38 and is greater than or equal 12.0 Determine if the version of Adobe Flash Player is less than 12.0.0.38 AND Determine if the version of Adobe Flash Player is greater than or equal 12.0 OR Determine if the version of Adobe Air is less than 4.0.0.1390 and is greater than or equal 3.0.0.408 Adobe AIR is installed AND Determine if the version of Adobe Air is less than 4.0.0.1390 AND Determine if the version of Adobe Air is greater than or equal 3.0.0.408 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx section Determine if the version of Flash.ocx is less than 11.7.700.260 and is greater than or equal 11.0 Determine if the version of Flash.ocx is less than 11.7.700.260 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Determine if the version of Flash.ocx is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Flash.ocx is less than or equal 11.9.900.170 AND Determine if the version of Flash.ocx is greater than or equal 11.8.0 OR Determine if the version of Flash.ocx is less than 12.0.0.38 and is greater than or equal 12.0 Determine if the version of Flash.ocx is less than 12.0.0.38 AND Determine if the version of Flash.ocx is greater than or equal 12.0

Definition Id: oval:org.mitre.oval:def:22390

Oval ID:	oval:org.mitre.oval:def:22390
Title:	RHSA-2014:0137: flash-plugin security update (Critical)
Description:	Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:0137-00 CVE-2014-0497	Version:	8
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	flash-plugin
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:11.2.202.336-1.el5 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 AND flash-plugin is earlier than 0:11.2.202.336-1.el6

Definition Id: oval:org.mitre.oval:def:22436

Oval ID:	oval:org.mitre.oval:def:22436
Title:	Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows allows remote attackers to execute arbitrary code via unspecified vectors (CVE-2014-0497)
Description:	Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0497	Version:	9
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player
Definition Synopsis:
Check the version of Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than 11.7.700.261 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.261 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Check the version of Adobe Flash Player 12 Adobe Flash Player 12 is installed AND Determine if the version of Adobe Flash Player is less than 12.0.0.44 and is greater than or equal 12.0 Determine if the version of Adobe Flash Player is less than 12.0.0.44 AND Determine if the version of Adobe Flash Player is greater than or equal 12.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 11 section Determine if the version of Flash.ocx is less than 11.7.700.261 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 12 section Determine if the version of Flash.ocx is less than 12.0.0.44 AND Determine if the version of Flash.ocx is greater than or equal 12.0

Definition Id: oval:org.mitre.oval:def:22499

Oval ID:	oval:org.mitre.oval:def:22499
Title:	RHSA-2014:0028: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an "address leak."
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:0028-00 CVE-2014-0491 CVE-2014-0492	Version:	25
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	flash-plugin
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:11.2.202.335-1.el5 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 AND flash-plugin is earlier than 0:11.2.202.335-1.el6

Definition Id: oval:org.mitre.oval:def:22530

Oval ID:	oval:org.mitre.oval:def:22530
Title:	Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK and Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors.
Description:	Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to bypass unspecified protection mechanisms via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0491	Version:	9
Platform(s):	Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows 8 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Check the version of Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine the version of Adobe Flash Player is less than 11.7.700.260 and is greater than or equal 11.0 or is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than 11.7.700.260 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.260 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 AND Determine if the version of Adobe Flash Player is greater than or equal 11.8.0 OR Check the version of Adobe Flash Player 12 Adobe Flash Player 12 is installed AND Determine if the version of Adobe Flash Player is less than 12.0.0.38 and is greater than or equal 12.0 Determine if the version of Adobe Flash Player is less than 12.0.0.38 AND Determine if the version of Adobe Flash Player is greater than or equal 12.0 OR Determine if the version of Adobe Air is less than 4.0.0.1390 and is greater than or equal 3.0.0.408 Adobe AIR is installed AND Determine if the version of Adobe Air is less than 4.0.0.1390 AND Determine if the version of Adobe Air is greater than or equal 3.0.0.408 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx section Determine if the version of Flash.ocx is less than 11.7.700.260 and is greater than or equal 11.0 Determine if the version of Flash.ocx is less than 11.7.700.260 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Determine if the version of Flash.ocx is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Flash.ocx is less than or equal 11.9.900.170 AND Determine if the version of Flash.ocx is greater than or equal 11.8.0 OR Determine if the version of Flash.ocx is less than 12.0.0.38 and is greater than or equal 12.0 Determine if the version of Flash.ocx is less than 12.0.0.38 AND Determine if the version of Flash.ocx is greater than or equal 12.0

Definition Id: oval:org.mitre.oval:def:23919

Oval ID:	oval:org.mitre.oval:def:23919
Title:	ELSA-2013:1818: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 11.7.700.257 and 11.8.x and 11.9.x before 11.9.900.170 on Windows and Mac OS X and before 11.2.202.332 on Linux, Adobe AIR before 3.9.0.1380, Adobe AIR SDK before 3.9.0.1380, and Adobe AIR SDK & Compiler before 3.9.0.1380 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1818-00 CVE-2013-5331 CVE-2013-5332	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
flash-plugin is earlier than 0:11.2.202.332-1.el6 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:24087

Oval ID:	oval:org.mitre.oval:def:24087
Title:	ELSA-2014:0028: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 11.7.700.260 and 11.8.x and 11.9.x before 12.0.0.38 on Windows and Mac OS X and before 11.2.202.335 on Linux, Adobe AIR before 4.0.0.1390, Adobe AIR SDK before 4.0.0.1390, and Adobe AIR SDK & Compiler before 4.0.0.1390 allow attackers to defeat the ASLR protection mechanism by leveraging an "address leak."
Family:	unix	Class:	patch
Reference(s):	ELSA-2014:0028-00 CVE-2014-0491 CVE-2014-0492	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
flash-plugin is earlier than 0:11.2.202.335-1.el6 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:24143

Oval ID:	oval:org.mitre.oval:def:24143
Title:	ELSA-2013:1518: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2013-5329.
Family:	unix	Class:	patch
Reference(s):	ELSA-2013:1518-00 CVE-2013-5329 CVE-2013-5330	Version:	13
Platform(s):	Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
flash-plugin is earlier than 0:11.2.202.327-1.el6 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:24193

Oval ID:	oval:org.mitre.oval:def:24193
Title:	ELSA-2014:0137: flash-plugin security update (Critical)
Description:	Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014:0137-00 CVE-2014-0497	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
flash-plugin is earlier than 0:11.2.202.336-1.el6 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:25327

Oval ID:	oval:org.mitre.oval:def:25327
Title:	SUSE-SU-2014:0221-1 -- Security update for flash-player
Description:	This update resolves an integer underflow vulnerability that could have been exploited to execute arbitrary code on the affected system (CVE-2014-0497). More information: http://helpx.adobe.com/security/products/flash-player/apsb14 -04.html <http://helpx.adobe.com/security/products/flash-player/apsb1 4-04.html>
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0221-1 CVE-2014-0497	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 11	Product(s):	flash-player
Definition Synopsis:
SUSE Linux Enterprise Desktop 11.x is installed Packages match section flash-player RPM is earlier than 0:11.2.202.336-0.3.1 AND flash-player-gnome RPM is earlier than 0:11.2.202.336-0.3.1 AND flash-player-kde4 RPM is earlier than 0:11.2.202.336-0.3.1

Definition Id: oval:org.mitre.oval:def:25522

Oval ID:	oval:org.mitre.oval:def:25522
Title:	SUSE-SU-2013:1896-1 -- Security update for flash-player
Description:	This update fixes the following security issues with flash-player: * bnc#854881: flash-plugin: multiple code execution flaws (APSB13-28) o These updates resolve a type confusion vulnerability that could lead to code execution (CVE-2013-5331). o These updates resolve a memory corruption vulnerability that could lead to code execution (CVE-2013-5332). o Ref: http://helpx.adobe.com/security/products/flash-player/apsb13 -28.html <http://helpx.adobe.com/security/products/flash-player/apsb1 3-28.html>
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2013:1896-1 CVE-2013-5331 CVE-2013-5332	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 11	Product(s):	flash-player
Definition Synopsis:
SUSE Linux Enterprise Desktop 11.x is installed Packages match section flash-player RPM is earlier than 0:11.2.202.332-0.3.1 AND flash-player-gnome RPM is earlier than 0:11.2.202.332-0.3.1 AND flash-player-kde4 RPM is earlier than 0:11.2.202.332-0.3.1

Definition Id: oval:org.mitre.oval:def:25528

Oval ID:	oval:org.mitre.oval:def:25528
Title:	SUSE-SU-2014:0116-1 -- Security update for flash-player
Description:	This update fixes the following security issues with flash-player: * flash-player: security protection bypass (bnc#858822)(APSB14-02) o These updates resolve a vulnerability that could be used to bypass Flash Player security protections (CVE-2014-0491). o These updates resolve an address leak vulnerability that could be used to defeat memory address layout randomization (CVE-2014-0492). o Ref.: http://helpx.adobe.com/security/products/flash-player/apsb14 -02.html <http://helpx.adobe.com/security/products/flash-player/apsb1 4-02.html>
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0116-1 CVE-2014-0491 CVE-2014-0492	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 11	Product(s):	flash-player
Definition Synopsis:
SUSE Linux Enterprise Desktop 11.x is installed Packages match section flash-player RPM is earlier than 0:11.2.202.335-0.4.1 AND flash-player-gnome RPM is earlier than 0:11.2.202.335-0.4.1 AND flash-player-kde4 RPM is earlier than 0:11.2.202.335-0.4.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Adobe Flash Player cpe:2.3:a:adobe:flash_player:12.0.0.43:::::::* cpe:2.3:a:adobe:flash_player:12.0.0.41:::::::* cpe:2.3:a:adobe:flash_player:12.0.0.38:::::::* cpe:2.3:a:adobe:flash_player:11.9.900.700:::::::* cpe:2.3:a:adobe:flash_player:11.9.900.170:::::::* cpe:2.3:a:adobe:flash_player:11.9.900.152:::::::* cpe:2.3:a:adobe:flash_player:11.9.900.117:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.97:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.94:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.175:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.174:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.168:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.279:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.275:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.272:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.269:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.261:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.260:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.257:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.252:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.242:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.232:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.225:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.224:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.203:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.202:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.169:::::::* cpe:2.3:a:adobe:flash_player:11.6.602.180:::::::* cpe:2.3:a:adobe:flash_player:11.6.602.171:::::::* cpe:2.3:a:adobe:flash_player:11.6.602.168:::::::* cpe:2.3:a:adobe:flash_player:11.6.602.167:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.149:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.146:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.136:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.135:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.110:::::::* cpe:2.3:a:adobe:flash_player:11.4.402.287:::::::* cpe:2.3:a:adobe:flash_player:11.4.402.278:::::::* cpe:2.3:a:adobe:flash_player:11.4.402.265:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.273:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.271:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.270:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.268:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.265:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.262:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.257:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.644:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.643:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.637:::::linux:: cpe:2.3:a:adobe:flash_player:11.2.202.637:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.635:::::linux:: cpe:2.3:a:adobe:flash_player:11.2.202.635:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.632:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.626:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.621:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.616:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.577:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.569:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.559:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.554:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.548:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.540:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.535:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.521:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.508:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.491:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.481:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.475:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.468:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.466:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.460:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.457:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.451:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.442:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.440:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.438:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.429:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.425:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.424:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.423:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.418:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.411:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.406:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.400:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.394:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.378:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.359:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.356:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.350:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.346:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.341:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.336:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.335:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.332:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.327:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.310:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.297:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.291:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.285:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.280:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.275:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.273:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.270:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.262:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.261:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.258:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.251:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.243:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.238:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.236:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.235:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.233:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.228:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.223:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.81:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.7:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.69:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.63:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.59:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.58:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.54:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.48:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.36:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.34:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.8:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.73:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.7:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.64:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.6:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.54:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.50:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.5:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.44:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.13:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.63:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.62:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.59:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.55:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.55::%7E%7E%7E%7Ex64%7E::::: cpe:2.3:a:adobe:flash_player:11.1.102.55::::::x64: cpe:2.3:a:adobe:flash_player:11.1:::::::* cpe:2.3:a:adobe:flash_player:11.0.1.153:::::::* cpe:2.3:a:adobe:flash_player:11.0.1.152:::::::* cpe:2.3:a:adobe:flash_player:11.0.1.152::%7E%7E%7E%7Ex64%7E::::: cpe:2.3:a:adobe:flash_player:11.0.1.152::::::x64: cpe:2.3:a:adobe:flash_player:11.0:::::::* cpe:2.3:a:adobe:flash_player:10.3.186.7:::::::* cpe:2.3:a:adobe:flash_player:10.3.186.6:::::::* cpe:2.3:a:adobe:flash_player:10.3.186.3:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.25:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.24:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.22:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.21:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.86:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.75:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.7:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.68:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.67:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.63:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.61:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.51:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.50:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.5:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.48:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.43:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.29:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.25:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.20:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.19:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.18:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.16:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.15:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.11:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.10:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.36:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.34:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.26:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.22:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.16:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.14:::::::* cpe:2.3:a:adobe:flash_player:10.3.:::::::* cpe:2.3:a:adobe:flash_player:10.3:::::::* cpe:2.3:a:adobe:flash_player:10.2.159.1:::::::* cpe:2.3:a:adobe:flash_player:10.2.157.51:::::::* cpe:2.3:a:adobe:flash_player:10.2.156.12:::::::* cpe:2.3:a:adobe:flash_player:10.2.154.25:::::::* cpe:2.3:a:adobe:flash_player:10.2.154.13:::::::* cpe:2.3:a:adobe:flash_player:10.2.153.1:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.33:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.32:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.26:::::::* cpe:2.3:a:adobe:flash_player:10.2.152:::::::* cpe:2.3:a:adobe:flash_player:10.1.95.2:::::::* cpe:2.3:a:adobe:flash_player:10.1.95.1:::::::* cpe:2.3:a:adobe:flash_player:10.1.92.8:::::::* cpe:2.3:a:adobe:flash_player:10.1.92.10:::::::* cpe:2.3:a:adobe:flash_player:10.1.85.3:::::::* cpe:2.3:a:adobe:flash_player:10.1.82.76:::::::* cpe:2.3:a:adobe:flash_player:10.1.53.64:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.15:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.14.1:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.14:::::::* cpe:2.3:a:adobe:flash_player:10.1.106.17:::::::* cpe:2.3:a:adobe:flash_player:10.1.106.16:::::::* cpe:2.3:a:adobe:flash_player:10.1.105.6:::::::* cpe:2.3:a:adobe:flash_player:10.1.102.64:::::::* cpe:2.3:a:adobe:flash_player:10.1:::::::* cpe:2.3:a:adobe:flash_player:10.0.45.2:::::::* cpe:2.3:a:adobe:flash_player:10.0.42.34:::::::* cpe:2.3:a:adobe:flash_player:10.0.32.18:::::::* cpe:2.3:a:adobe:flash_player:10.0.22.87:::::::* cpe:2.3:a:adobe:flash_player:10.0.2.54:::::::* cpe:2.3:a:adobe:flash_player:10.0.15.3:::::::* cpe:2.3:a:adobe:flash_player:10.0.12.36:::::::* cpe:2.3:a:adobe:flash_player:10.0.12.10:::::::* cpe:2.3:a:adobe:flash_player:10.0.0.584:::::::* cpe:2.3:a:adobe:flash_player:10:::::::* cpe:2.3:a:adobe:flash_player:9.125.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.9.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.8.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.48.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.47.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.45.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.31.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.31:::::::* cpe:2.3:a:adobe:flash_player:9.0.283.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.280:::::::* cpe:2.3:a:adobe:flash_player:9.0.28.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.28.0::mac_os_x::::: cpe:2.3:a:adobe:flash_player:9.0.28:::::::* cpe:2.3:a:adobe:flash_player:9.0.277.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.262.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.260.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.246.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.20.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.20:::::::* cpe:2.3:a:adobe:flash_player:9.0.18d60:::::::* cpe:2.3:a:adobe:flash_player:9.0.16.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.16:::::::* cpe:2.3:a:adobe:flash_player:9.0.16::windows::::: cpe:2.3:a:adobe:flash_player:9.0.159.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.155.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.152.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.151.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.125.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.124.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.115.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.114.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.112.0:::::::* cpe:2.3:a:adobe:flash_player:9.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.42.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.39.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.35.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.34.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.33.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.24.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.22.0:::::::* cpe:2.3:a:adobe:flash_player:8.0:::::::* cpe:2.3:a:adobe:flash_player:8.0::pro::::: cpe:2.3:a:adobe:flash_player:8.0::basic::::: cpe:2.3:a:adobe:flash_player:8::professional::::: cpe:2.3:a:adobe:flash_player:8::pro::::: cpe:2.3:a:adobe:flash_player:7.2:::::::* cpe:2.3:a:adobe:flash_player:7.1.1:::::::* cpe:2.3:a:adobe:flash_player:7.1:::::::* cpe:2.3:a:adobe:flash_player:7.0.73.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.70.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.69.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.68.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.67.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.66.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.63:::::::* cpe:2.3:a:adobe:flash_player:7.0.63::linux::::: cpe:2.3:a:adobe:flash_player:7.0.61.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.60.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.53.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.25:::::::* cpe:2.3:a:adobe:flash_player:7.0.24.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.19.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.14.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.1:::::::* cpe:2.3:a:adobe:flash_player:7.0_r67::solaris::::: cpe:2.3:a:adobe:flash_player:7.0_r67:::::::* cpe:2.3:a:adobe:flash_player:7.0:::::::* cpe:2.3:a:adobe:flash_player:6.0.79:::::::* cpe:2.3:a:adobe:flash_player:6.0.21.0:::::::* cpe:2.3:a:adobe:flash_player:6:::::::* cpe:2.3:a:adobe:flash_player:5:::::::* cpe:2.3:a:adobe:flash_player:4:::::::* cpe:2.3:a:adobe:flash_player:3:::::::* cpe:2.3:a:adobe:flash_player:2:::::::* cpe:2.3:a:adobe:flash_player:mx_2004:::::::* cpe:2.3:a:adobe:flash_player:cs4::pro::::: cpe:2.3:a:adobe:flash_player:cs3::pro::::: cpe:2.3:a:adobe:flash_player:cs3::professional::::: cpe:2.3:a:adobe:flash_player:::::::: cpe:2.3:a:adobe:flash_player:::basic:::::* cpe:2.3:a:adobe:flash_player:::pro:::::* cpe:2.3:a:adobe:flash_player::::::edge::* cpe:2.3:a:adobe:flash_player::::::internet_explorer_11::* cpe:2.3:a:adobe:flash_player::::::chrome::* cpe:2.3:a:adobe:flash_player:-:::::::*	305

ExploitDB Exploits

id	Description
2014-05-06	Adobe Flash Player Integer Underflow Remote Code Execution
2014-04-29	Adobe Flash Player Type Confusion Remote Code Execution

Information Assurance Vulnerability Management (IAVM)

Date	Description
2014-02-06	IAVM : 2014-A-0020 - Adobe Flash Player Remote Code Execution Vulnerability Severity : Category I - VMSKEY : V0043920
2014-01-16	IAVM : 2014-A-0001 - Multiple Vulnerabilities in Adobe Flash Player and AIR Severity : Category I - VMSKEY : V0043404
2013-12-12	IAVM : 2013-A-0229 - Multiple Vulnerabilities in Adobe Flash Player Severity : Category I - VMSKEY : V0042595
2013-11-14	IAVM : 2013-A-0209 - Multiple Vulnerabilities in Adobe Flash Player Severity : Category I - VMSKEY : V0042292

Snort® IPS/IDS

Date	Description
2016-08-09	Adobe Flash Player integer underflow attempt RuleID : 39458 - Revision : 1 - Type : FILE-FLASH
2016-08-09	Adobe Flash Player integer underflow attempt RuleID : 39457 - Revision : 2 - Type : FILE-FLASH
2016-04-26	Adobe Flash Player integer underflow attempt RuleID : 38311 - Revision : 1 - Type : FILE-FLASH
2016-04-26	Adobe Flash Player integer underflow attempt RuleID : 38310 - Revision : 2 - Type : FILE-FLASH
2016-03-22	Adobe Flash Player integer underflow attempt RuleID : 37809 - Revision : 1 - Type : FILE-FLASH
2016-03-22	Adobe Flash Player integer underflow attempt RuleID : 37808 - Revision : 2 - Type : FILE-FLASH
2016-03-22	Adobe Flash Player integer underflow attempt RuleID : 37807 - Revision : 2 - Type : FILE-FLASH
2016-03-22	Adobe Flash Player integer underflow attempt RuleID : 37806 - Revision : 2 - Type : FILE-FLASH
2016-03-14	Adobe Flash Player and AIR type confusion remote code execution attempt RuleID : 36530 - Revision : 3 - Type : FILE-FLASH
2016-03-14	Adobe Flash Player and AIR type confusion remote code execution attempt RuleID : 36529 - Revision : 3 - Type : FILE-FLASH
2016-03-14	Adobe Flash Player and AIR type confusion remote code execution attempt RuleID : 36528 - Revision : 4 - Type : FILE-FLASH
2016-03-14	Adobe Flash Player and AIR type confusion remote code execution attempt RuleID : 36527 - Revision : 3 - Type : FILE-FLASH
2014-04-10	Adobe Flash Player memory corruption attempt RuleID : 30152 - Revision : 4 - Type : FILE-MULTIMEDIA
2014-04-10	Adobe Flash Player memory corruption attempt RuleID : 30151 - Revision : 5 - Type : FILE-MULTIMEDIA
2014-04-10	Adobe Flash Player memory corruption attempt RuleID : 30150 - Revision : 3 - Type : FILE-MULTIMEDIA
2014-03-22	Adobe Flash Player ActionScript bytecode object type confusion information di... RuleID : 29836 - Revision : 4 - Type : FILE-FLASH
2014-03-22	Adobe Flash Player ActionScript bytecode object type confusion information di... RuleID : 29835 - Revision : 3 - Type : FILE-FLASH
2014-03-08	Adobe Flash Player integer underflow attempt RuleID : 29634 - Revision : 7 - Type : FILE-FLASH
2014-03-08	Adobe Flash Player integer underflow attempt RuleID : 29633 - Revision : 6 - Type : FILE-FLASH
2014-03-08	Adobe Flash Player integer underflow attempt RuleID : 29632 - Revision : 6 - Type : FILE-FLASH
2014-03-08	Adobe Flash Player integer underflow attempt RuleID : 29631 - Revision : 7 - Type : FILE-FLASH
2014-03-08	Win.Trojan.Keylogger inbound connection RuleID : 29616 - Revision : 10 - Type : MALWARE-CNC
2014-03-08	Win.Trojan.Keylogger outbound connection RuleID : 29615 - Revision : 9 - Type : MALWARE-CNC
2014-03-06	Adobe Flash Player invalid instruction memory corruption attempt RuleID : 29554 - Revision : 4 - Type : FILE-FLASH
2014-03-06	Adobe Flash Player invalid instruction memory corruption attempt RuleID : 29553 - Revision : 3 - Type : FILE-FLASH
2014-03-06	Adobe Flash Player invalid instruction memory corruption attempt RuleID : 29552 - Revision : 4 - Type : FILE-FLASH
2014-03-06	Adobe Flash Player invalid instruction memory corruption attempt RuleID : 29551 - Revision : 3 - Type : FILE-FLASH
2014-02-08	Adobe Flash Player sharable ByteArray code execution attempt RuleID : 29288 - Revision : 3 - Type : FILE-FLASH
2014-02-08	Adobe Flash Player sharable ByteArray code execution attempt RuleID : 29287 - Revision : 3 - Type : FILE-FLASH
2014-02-08	Adobe Flash Player sharable ByteArray code execution attempt RuleID : 29286 - Revision : 3 - Type : FILE-FLASH
2014-02-08	Adobe Flash Player sharable ByteArray code execution attempt RuleID : 29285 - Revision : 3 - Type : FILE-FLASH
2014-02-08	Adobe Flash Player sharable ByteArray code execution attempt RuleID : 29284 - Revision : 3 - Type : FILE-FLASH
2014-02-08	Adobe Flash Player sharable ByteArray code execution attempt RuleID : 29283 - Revision : 4 - Type : FILE-FLASH
2014-02-08	Adobe Flash Player sharable ByteArray code execution attempt RuleID : 29282 - Revision : 3 - Type : FILE-FLASH
2014-02-08	Adobe Flash Player sharable ByteArray code execution attempt RuleID : 29281 - Revision : 4 - Type : FILE-FLASH
2014-01-23	Adobe Flash Player memory corruption attempt RuleID : 29061 - Revision : 4 - Type : FILE-MULTIMEDIA
2014-01-23	Adobe Flash Player and AIR type confusion remote code execution attempt RuleID : 29054 - Revision : 4 - Type : FILE-FLASH
2014-01-23	Adobe Flash Player and AIR type confusion remote code execution attempt RuleID : 29053 - Revision : 4 - Type : FILE-FLASH
2014-01-23	Adobe Flash Player and AIR type confusion remote code execution attempt RuleID : 29052 - Revision : 4 - Type : FILE-FLASH
2014-01-23	Adobe Flash Player and AIR type confusion remote code execution attempt RuleID : 29051 - Revision : 5 - Type : FILE-FLASH
2014-01-23	Adobe Flash Player and AIR type confusion remote code execution attempt RuleID : 29050 - Revision : 4 - Type : FILE-FLASH
2014-01-23	Adobe Flash Player and AIR type confusion remote code execution attempt RuleID : 29049 - Revision : 4 - Type : FILE-FLASH
2014-01-23	Adobe Flash Player and AIR type confusion remote code execution attempt RuleID : 29048 - Revision : 4 - Type : FILE-FLASH
2014-01-23	Adobe Flash Player and AIR type confusion remote code execution attempt RuleID : 29047 - Revision : 5 - Type : FILE-FLASH

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-78.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-109.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-992.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2013-879.nasl - Type : ACT_GATHER_INFO
2014-02-12	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_flash-player-140206.nasl - Type : ACT_GATHER_INFO
2014-02-07	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201402-06.nasl - Type : ACT_GATHER_INFO
2014-02-06	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2014-0137.nasl - Type : ACT_GATHER_INFO
2014-02-05	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_b7a7576d8e0a11e399769c4e36909cc0.nasl - Type : ACT_GATHER_INFO
2014-02-04	Name : The remote Mac OS X host has a browser plugin that is affected by a code exec... File : macosx_flash_player_12_0_0_44.nasl - Type : ACT_GATHER_INFO
2014-02-04	Name : The remote host has an ActiveX control installed that is affected by a remote... File : smb_kb2929825.nasl - Type : ACT_GATHER_INFO
2014-02-04	Name : The remote Windows host has a browser plugin that is affected by a code execu... File : flash_player_apsb14-04.nasl - Type : ACT_GATHER_INFO
2014-01-24	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_c0ef849e84ac11e3bec49c4e36909cc0.nasl - Type : ACT_GATHER_INFO
2014-01-22	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_flash-player-140116.nasl - Type : ACT_GATHER_INFO
2014-01-16	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2014-0028.nasl - Type : ACT_GATHER_INFO
2014-01-14	Name : The remote Windows host has a browser plugin that is affected by multiple vul... File : flash_player_apsb14-02.nasl - Type : ACT_GATHER_INFO
2014-01-14	Name : The remote host has an ActiveX control installed that is affected by multiple... File : smb_kb2916626.nasl - Type : ACT_GATHER_INFO
2014-01-14	Name : The remote Mac OS X host has a browser plugin that is affected by multiple vu... File : macosx_flash_player_12_0_0_38.nasl - Type : ACT_GATHER_INFO
2014-01-14	Name : The remote Windows host contains a version of Adobe AIR that is affected by m... File : adobe_air_apsb14-02.nasl - Type : ACT_GATHER_INFO
2014-01-14	Name : The remote Mac OS X host contains a version of Adobe AIR that is affected by ... File : macosx_adobe_air_4_0_0_1390.nasl - Type : ACT_GATHER_INFO
2013-12-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_flash-player-131213.nasl - Type : ACT_GATHER_INFO
2013-12-12	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2013-1818.nasl - Type : ACT_GATHER_INFO
2013-12-11	Name : The remote Mac OS X host has a browser plugin that is affected by multiple vu... File : macosx_flash_player_11_9_900_170.nasl - Type : ACT_GATHER_INFO
2013-12-11	Name : The remote Windows host has a browser plugin that is affected by multiple vul... File : flash_player_apsb13-28.nasl - Type : ACT_GATHER_INFO
2013-12-11	Name : The remote host has an ActiveX control installed that is affected by memory c... File : smb_kb2907997.nasl - Type : ACT_GATHER_INFO
2013-12-11	Name : The remote Mac OS X host contains a version of Adobe AIR that is affected by ... File : macosx_adobe_air_3_9_0_1380.nasl - Type : ACT_GATHER_INFO
2013-12-11	Name : The remote Windows host contains a version of Adobe AIR that is affected by m... File : adobe_air_apsb13-28.nasl - Type : ACT_GATHER_INFO
2013-11-18	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_flash-player-131114.nasl - Type : ACT_GATHER_INFO
2013-11-14	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2013-1518.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote Windows host has a browser plugin that is affected by multiple mem... File : flash_player_apsb13-26.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote host has an ActiveX control installed that is affected by memory c... File : smb_kb2898108.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_adcbdba24c2711e3984898fc11cdc4f5.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote Windows host contains a version of Adobe AIR that is affected by m... File : adobe_air_apsb13-26.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote Mac OS X host has a browser plugin that is affected by multiple me... File : macosx_flash_player_11_9_900_152.nasl - Type : ACT_GATHER_INFO
2013-11-13	Name : The remote Mac OS X host contains a version of Adobe AIR that is affected by ... File : macosx_adobe_air_3_9_0_1210.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:38:08	Multiple Updates
2014-02-06 13:18:35	First insertion

Global Informations

Type	Count
CWE ID(s)	7
Oval ID(s)	18
CPE ID(s)	305
ExploitDB Exploit(s)	2
IAVM(s)	4
Snort® Rule(s)	44
Nessus® Exploit(s)	34

	Related
10	CVE-2014-0497
10	CVE-2014-0492
10	CVE-2014-0491
10	CVE-2013-5330
10	CVE-2013-5329
9.3	CVE-2013-5332
9.3	CVE-2013-5331
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 7 more Alert(s)