10 - GLSA-201406-08

Executive Summary

Summary
Title	Adobe Flash Player: Multiple vulnerabilities

Informations
Name	GLSA-201406-08	First vendor Publication	2014-06-10
Vendor	Gentoo	Last vendor Modification	2014-06-10
Severity (Vendor)	Normal	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Synopsis

Multiple vulnerabilities have been found in Adobe Flash Player, worst of which allows remote attackers to execute arbitrary code.

Background

The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites.

Description

Multiple vulnerabilities have been discovered in Adobe Flash Player.
Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, or cause a Denial of Service condition.

Workaround

There is no known workaround at this time.

Resolution

All Adobe Flash Player users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-plugins/adobe-flash-11.2.202.359"

References

[ 1 ] CVE-2014-0510 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0510
[ 2 ] CVE-2014-0516 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0516
[ 3 ] CVE-2014-0517 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0517
[ 4 ] CVE-2014-0518 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0518
[ 5 ] CVE-2014-0519 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0519
[ 6 ] CVE-2014-0520 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0520

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-201406-08.xml

Original Source

Url : http://security.gentoo.org/glsa/glsa-201406-08.xml

CWE : Common Weakness Enumeration

%	Id	Name
83 %	CWE-264	Permissions, Privileges, and Access Controls
17 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:24229

Oval ID:	oval:org.mitre.oval:def:24229
Title:	ELSA-2014:0496: flash-plugin security update (Critical)
Description:	The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities are detailed in the Adobe Security Bulletin APSB14-14, listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2014-0510, CVE-2014-0517, CVE-2014-0518, CVE-2014-0519, CVE-2014-0520) A flaw in flash-plugin could allow an attacker to bypass the same-origin policy. (CVE-2014-0516) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.359.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014:0496-00 CVE-2014-0510 CVE-2014-0516 CVE-2014-0517 CVE-2014-0518 CVE-2014-0519 CVE-2014-0520	Version:	4
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
rpm test Oracle Linux 5.x AND flash-plugin is earlier than 0:11.2.202.359-1.el5 OR rpm test flash-plugin is earlier than 0:11.2.202.359-1.el6 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:24298

Oval ID:	oval:org.mitre.oval:def:24298
Title:	Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism
Description:	Heap-based buffer overflow in Adobe Flash Player 12.0.0.77 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by Zeguang Zhao and Liang Chen during a Pwn2Own competition at CanSecWest 2014.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0510	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player
Definition Synopsis:
Adobe Flash Player section Adobe Flash Player 12 is installed AND Version of Adobe Flash Player is 12.0.0.77 OR Flash.ocx section ActiveX Control is installed AND Determine if the version of Flash.ocx is equals 12.0.0.77

Definition Id: oval:org.mitre.oval:def:24319

Oval ID:	oval:org.mitre.oval:def:24319
Title:	Adobe Flash Player before 13.0.0.214 on Windows, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK and Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions
Description:	Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0519.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0520	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than 13.0.0.214 Adobe Flash Player 13 is installed AND Version of Adobe Flash Player is less than 13.0.0.214 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less 13.0.0.111 OR Flash.ocx section ActiveX Control is installed AND Determine if the version of Flash.ocx is less than 13.0.0.214

Definition Id: oval:org.mitre.oval:def:24420

Oval ID:	oval:org.mitre.oval:def:24420
Title:	Adobe Flash Player before 13.0.0.214 on Windows, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK and Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions
Description:	Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0518, and CVE-2014-0520.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0519	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than 13.0.0.214 Adobe Flash Player 13 is installed AND Version of Adobe Flash Player is less than 13.0.0.214 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less 13.0.0.111 OR Flash.ocx section ActiveX Control is installed AND Determine if the version of Flash.ocx is less than 13.0.0.214

Definition Id: oval:org.mitre.oval:def:24595

Oval ID:	oval:org.mitre.oval:def:24595
Title:	Adobe Flash Player before 13.0.0.214 on Windows, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK and Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions
Description:	Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0517, CVE-2014-0519, and CVE-2014-0520.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0518	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than 13.0.0.214 Adobe Flash Player 13 is installed AND Version of Adobe Flash Player is less than 13.0.0.214 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less 13.0.0.111 OR Flash.ocx section ActiveX Control is installed AND Determine if the version of Flash.ocx is less than 13.0.0.214

Definition Id: oval:org.mitre.oval:def:24605

Oval ID:	oval:org.mitre.oval:def:24605
Title:	Adobe Flash Player before 13.0.0.214 on Windows, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK and Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions
Description:	Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow attackers to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2014-0518, CVE-2014-0519, and CVE-2014-0520.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0517	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than 13.0.0.214 Adobe Flash Player 13 is installed AND Version of Adobe Flash Player is less than 13.0.0.214 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less 13.0.0.111 OR Flash.ocx section ActiveX Control is installed AND Determine if the version of Flash.ocx is less than 13.0.0.214

Definition Id: oval:org.mitre.oval:def:24644

Oval ID:	oval:org.mitre.oval:def:24644
Title:	Adobe Flash Player before 13.0.0.214 on Windows, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK and Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy
Description:	Adobe Flash Player before 13.0.0.214 on Windows and OS X and before 11.2.202.359 on Linux, Adobe AIR SDK before 13.0.0.111, and Adobe AIR SDK & Compiler before 13.0.0.111 allow remote attackers to bypass the Same Origin Policy via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0516	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than 13.0.0.214 Adobe Flash Player 13 is installed AND Version of Adobe Flash Player is less than 13.0.0.214 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less 13.0.0.111 OR Flash.ocx section ActiveX Control is installed AND Determine if the version of Flash.ocx is less than 13.0.0.214

Definition Id: oval:org.mitre.oval:def:24789

Oval ID:	oval:org.mitre.oval:def:24789
Title:	RHSA-2014:0496: flash-plugin security update (Critical)
Description:	The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities are detailed in the Adobe Security Bulletin APSB14-14, listed in the References section. Multiple flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2014-0510, CVE-2014-0517, CVE-2014-0518, CVE-2014-0519, CVE-2014-0520) A flaw in flash-plugin could allow an attacker to bypass the same-origin policy. (CVE-2014-0516) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.359.
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:0496-00 CVE-2014-0510 CVE-2014-0516 CVE-2014-0517 CVE-2014-0518 CVE-2014-0519 CVE-2014-0520	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6	Product(s):	flash-plugin
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:11.2.202.359-1.el5 AND Operation system section flash-plugin is earlier than 0:11.2.202.359-1.el6 AND The operating system installed on the system is Red Hat Enterprise Linux 6

Definition Id: oval:org.mitre.oval:def:25159

Oval ID:	oval:org.mitre.oval:def:25159
Title:	SUSE-SU-2014:0671-1 -- Security update for flash-player
Description:	Adobe flash-player was updated to version 11.2.202.359 to resolve several security issues: * Remote attackers could execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors. (CVE-2014-0510) * Remote attackers could bypass the Same Origin Policy via unspecified vectors. (CVE-2014-0516) * Bypass intended access restrictions via unspecified vectors. (CVE-2014-0517, CVE-2014-0518, CVE-2014-0519, CVE-2014-0520)
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0671-1 CVE-2014-0510 CVE-2014-0516 CVE-2014-0517 CVE-2014-0518 CVE-2014-0519 CVE-2014-0520	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 11	Product(s):	flash-player
Definition Synopsis:
SUSE Linux Enterprise Desktop 11.x is installed Packages match section flash-player RPM is earlier than 0:11.2.202.359-0.3.1 AND flash-player-gnome RPM is earlier than 0:11.2.202.359-0.3.1 AND flash-player-kde4 RPM is earlier than 0:11.2.202.359-0.3.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Adobe Flash Player cpe:2.3:a:adobe:flash_player:13.0.0.206:::::::* cpe:2.3:a:adobe:flash_player:13.0.0.201:::::::* cpe:2.3:a:adobe:flash_player:13.0.0.182:::::::* cpe:2.3:a:adobe:flash_player:13.0::::esr::: cpe:2.3:a:adobe:flash_player:12.0.0.77:::::::* cpe:2.3:a:adobe:flash_player:12.0.0.70:::::::* cpe:2.3:a:adobe:flash_player:12.0.0.44:::::::* cpe:2.3:a:adobe:flash_player:12.0.0.43:::::::* cpe:2.3:a:adobe:flash_player:12.0.0.41:::::::* cpe:2.3:a:adobe:flash_player:12.0.0.38:::::::* cpe:2.3:a:adobe:flash_player:11.9.900.700:::::::* cpe:2.3:a:adobe:flash_player:11.9.900.170:::::::* cpe:2.3:a:adobe:flash_player:11.9.900.152:::::::* cpe:2.3:a:adobe:flash_player:11.9.900.117:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.97:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.94:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.175:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.174:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.168:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.279:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.275:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.272:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.269:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.261:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.260:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.257:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.252:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.242:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.232:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.225:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.224:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.203:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.202:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.169:::::::* cpe:2.3:a:adobe:flash_player:11.6.602.180:::::::* cpe:2.3:a:adobe:flash_player:11.6.602.171:::::::* cpe:2.3:a:adobe:flash_player:11.6.602.168:::::::* cpe:2.3:a:adobe:flash_player:11.6.602.167:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.149:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.146:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.136:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.135:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.110:::::::* cpe:2.3:a:adobe:flash_player:11.4.402.287:::::::* cpe:2.3:a:adobe:flash_player:11.4.402.278:::::::* cpe:2.3:a:adobe:flash_player:11.4.402.265:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.273:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.271:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.270:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.268:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.265:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.262:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.257:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.644:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.643:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.637:::::linux:: cpe:2.3:a:adobe:flash_player:11.2.202.637:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.635:::::linux:: cpe:2.3:a:adobe:flash_player:11.2.202.635:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.632:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.626:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.621:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.616:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.577:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.569:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.559:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.554:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.548:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.540:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.535:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.521:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.508:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.491:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.481:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.475:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.468:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.466:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.460:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.457:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.451:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.442:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.440:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.438:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.429:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.425:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.424:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.423:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.418:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.411:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.406:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.400:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.394:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.378:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.359:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.356:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.350:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.346:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.341:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.336:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.335:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.332:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.327:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.310:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.297:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.291:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.285:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.280:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.275:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.273:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.270:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.262:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.261:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.258:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.251:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.243:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.238:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.236:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.235:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.233:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.228:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.223:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.81:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.7:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.69:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.63:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.59:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.58:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.54:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.48:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.36:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.34:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.8:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.73:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.7:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.64:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.6:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.54:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.50:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.5:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.44:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.13:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.63:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.62:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.59:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.55:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.55::%7E%7E%7E%7Ex64%7E::::: cpe:2.3:a:adobe:flash_player:11.1.102.55::::::x64: cpe:2.3:a:adobe:flash_player:11.1:::::::* cpe:2.3:a:adobe:flash_player:11.0.1.153:::::::* cpe:2.3:a:adobe:flash_player:11.0.1.152:::::::* cpe:2.3:a:adobe:flash_player:11.0.1.152::%7E%7E%7E%7Ex64%7E::::: cpe:2.3:a:adobe:flash_player:11.0.1.152::::::x64: cpe:2.3:a:adobe:flash_player:11.0:::::::* cpe:2.3:a:adobe:flash_player:10.3.186.7:::::::* cpe:2.3:a:adobe:flash_player:10.3.186.6:::::::* cpe:2.3:a:adobe:flash_player:10.3.186.3:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.25:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.24:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.22:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.21:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.86:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.75:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.7:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.68:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.67:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.63:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.61:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.51:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.50:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.5:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.48:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.43:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.29:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.25:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.20:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.19:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.18:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.16:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.15:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.11:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.10:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.36:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.34:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.26:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.22:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.16:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.14:::::::* cpe:2.3:a:adobe:flash_player:10.3.:::::::* cpe:2.3:a:adobe:flash_player:10.3:::::::* cpe:2.3:a:adobe:flash_player:10.2.159.1:::::::* cpe:2.3:a:adobe:flash_player:10.2.157.51:::::::* cpe:2.3:a:adobe:flash_player:10.2.156.12:::::::* cpe:2.3:a:adobe:flash_player:10.2.154.25:::::::* cpe:2.3:a:adobe:flash_player:10.2.154.13:::::::* cpe:2.3:a:adobe:flash_player:10.2.153.1:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.33:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.32:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.26:::::::* cpe:2.3:a:adobe:flash_player:10.2.152:::::::* cpe:2.3:a:adobe:flash_player:10.1.95.2:::::::* cpe:2.3:a:adobe:flash_player:10.1.95.1:::::::* cpe:2.3:a:adobe:flash_player:10.1.92.8:::::::* cpe:2.3:a:adobe:flash_player:10.1.92.10:::::::* cpe:2.3:a:adobe:flash_player:10.1.85.3:::::::* cpe:2.3:a:adobe:flash_player:10.1.82.76:::::::* cpe:2.3:a:adobe:flash_player:10.1.53.64:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.15:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.14.1:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.14:::::::* cpe:2.3:a:adobe:flash_player:10.1.106.17:::::::* cpe:2.3:a:adobe:flash_player:10.1.106.16:::::::* cpe:2.3:a:adobe:flash_player:10.1.105.6:::::::* cpe:2.3:a:adobe:flash_player:10.1.102.64:::::::* cpe:2.3:a:adobe:flash_player:10.1:::::::* cpe:2.3:a:adobe:flash_player:10.0.45.2:::::::* cpe:2.3:a:adobe:flash_player:10.0.42.34:::::::* cpe:2.3:a:adobe:flash_player:10.0.32.18:::::::* cpe:2.3:a:adobe:flash_player:10.0.22.87:::::::* cpe:2.3:a:adobe:flash_player:10.0.2.54:::::::* cpe:2.3:a:adobe:flash_player:10.0.15.3:::::::* cpe:2.3:a:adobe:flash_player:10.0.12.36:::::::* cpe:2.3:a:adobe:flash_player:10.0.12.10:::::::* cpe:2.3:a:adobe:flash_player:10.0.0.584:::::::* cpe:2.3:a:adobe:flash_player:10:::::::* cpe:2.3:a:adobe:flash_player:9.125.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.9.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.8.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.48.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.47.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.45.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.31.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.31:::::::* cpe:2.3:a:adobe:flash_player:9.0.283.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.280:::::::* cpe:2.3:a:adobe:flash_player:9.0.28.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.28.0::mac_os_x::::: cpe:2.3:a:adobe:flash_player:9.0.28:::::::* cpe:2.3:a:adobe:flash_player:9.0.277.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.262.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.260.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.246.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.20.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.20:::::::* cpe:2.3:a:adobe:flash_player:9.0.18d60:::::::* cpe:2.3:a:adobe:flash_player:9.0.16.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.16:::::::* cpe:2.3:a:adobe:flash_player:9.0.16::windows::::: cpe:2.3:a:adobe:flash_player:9.0.159.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.155.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.152.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.151.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.125.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.124.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.115.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.114.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.112.0:::::::* cpe:2.3:a:adobe:flash_player:9.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.42.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.39.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.35.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.34.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.33.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.24.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.22.0:::::::* cpe:2.3:a:adobe:flash_player:8.0:::::::* cpe:2.3:a:adobe:flash_player:8.0::pro::::: cpe:2.3:a:adobe:flash_player:8.0::basic::::: cpe:2.3:a:adobe:flash_player:8::professional::::: cpe:2.3:a:adobe:flash_player:8::pro::::: cpe:2.3:a:adobe:flash_player:7.2:::::::* cpe:2.3:a:adobe:flash_player:7.1.1:::::::* cpe:2.3:a:adobe:flash_player:7.1:::::::* cpe:2.3:a:adobe:flash_player:7.0.73.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.70.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.69.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.68.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.67.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.66.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.63:::::::* cpe:2.3:a:adobe:flash_player:7.0.63::linux::::: cpe:2.3:a:adobe:flash_player:7.0.61.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.60.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.53.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.25:::::::* cpe:2.3:a:adobe:flash_player:7.0.24.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.19.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.14.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.1:::::::* cpe:2.3:a:adobe:flash_player:7.0_r67::solaris::::: cpe:2.3:a:adobe:flash_player:7.0_r67:::::::* cpe:2.3:a:adobe:flash_player:7.0:::::::* cpe:2.3:a:adobe:flash_player:6.0.79:::::::* cpe:2.3:a:adobe:flash_player:6.0.21.0:::::::* cpe:2.3:a:adobe:flash_player:6:::::::* cpe:2.3:a:adobe:flash_player:5:::::::* cpe:2.3:a:adobe:flash_player:4:::::::* cpe:2.3:a:adobe:flash_player:3:::::::* cpe:2.3:a:adobe:flash_player:2:::::::* cpe:2.3:a:adobe:flash_player:mx_2004:::::::* cpe:2.3:a:adobe:flash_player:cs4::pro::::: cpe:2.3:a:adobe:flash_player:cs3::pro::::: cpe:2.3:a:adobe:flash_player:cs3::professional::::: cpe:2.3:a:adobe:flash_player:::::::: cpe:2.3:a:adobe:flash_player:::basic:::::* cpe:2.3:a:adobe:flash_player:::pro:::::* cpe:2.3:a:adobe:flash_player::::::edge::* cpe:2.3:a:adobe:flash_player::::::internet_explorer_11::* cpe:2.3:a:adobe:flash_player::::::chrome::* cpe:2.3:a:adobe:flash_player:-:::::::*	312

Information Assurance Vulnerability Management (IAVM)

Date	Description
2014-05-15	IAVM : 2014-A-0069 - Multiple Vulnerabilities in Adobe Flash Player and AIR Severity : Category I - VMSKEY : V0050437

Snort® IPS/IDS

Date	Description
2014-11-16	Adobe Flash Player cross-origin security policy bypass attempt RuleID : 31685 - Revision : 4 - Type : FILE-FLASH
2014-11-16	Adobe Flash Player cross-origin security policy bypass attempt RuleID : 31684 - Revision : 3 - Type : FILE-FLASH
2014-11-16	Adobe Flash Broker write to junction exploit attempt RuleID : 31677 - Revision : 3 - Type : FILE-FLASH
2014-11-16	Adobe Flash Broker write to junction exploit attempt RuleID : 31676 - Revision : 3 - Type : FILE-FLASH
2014-11-16	Adobe Flash Broker write to junction exploit attempt RuleID : 31675 - Revision : 3 - Type : FILE-FLASH
2014-11-16	Adobe Flash Broker write to junction exploit attempt RuleID : 31674 - Revision : 3 - Type : FILE-FLASH
2014-11-16	Adobe Flash Player Microsoft Internet Explorer sandbox escape attempt RuleID : 31496 - Revision : 3 - Type : FILE-FLASH
2014-11-16	Adobe Flash Player Microsoft Internet Explorer sandbox escape attempt RuleID : 31495 - Revision : 3 - Type : FILE-FLASH
2014-11-16	Adobe Flash Player Microsoft Internet Explorer sandbox escape attempt RuleID : 31286 - Revision : 6 - Type : FILE-FLASH
2014-11-16	Adobe Flash Player Microsoft Internet Explorer sandbox escape attempt RuleID : 31285 - Revision : 4 - Type : FILE-FLASH
2014-11-16	Adobe Flash Player Microsoft Internet Explorer sandbox escape attempt RuleID : 31284 - Revision : 6 - Type : FILE-FLASH
2014-11-16	Adobe Flash Player Microsoft Internet Explorer sandbox escape attempt RuleID : 31283 - Revision : 3 - Type : FILE-FLASH
2014-11-16	Adobe Flash malformed regular expression exploit attempt RuleID : 31246 - Revision : 3 - Type : FILE-FLASH
2014-11-16	Adobe Flash malformed regular expression exploit attempt RuleID : 31245 - Revision : 3 - Type : FILE-FLASH
2014-06-14	Adobe Flash Player memory corruption attempt RuleID : 31026 - Revision : 2 - Type : FILE-FLASH
2014-06-14	Adobe Flash Player memory corruption attempt RuleID : 31025 - Revision : 3 - Type : FILE-FLASH
2014-06-14	Adobe Flash Player memory corruption attempt RuleID : 31024 - Revision : 2 - Type : FILE-FLASH
2014-06-14	Adobe Flash Player memory corruption attempt RuleID : 31023 - Revision : 2 - Type : FILE-FLASH

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-377.nasl - Type : ACT_GATHER_INFO
2014-06-11	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-08.nasl - Type : ACT_GATHER_INFO
2014-05-27	Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_688e73a2e51411e3a52a98fc11cdc4f5.nasl - Type : ACT_GATHER_INFO
2014-05-19	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_flash-player-140515.nasl - Type : ACT_GATHER_INFO
2014-05-15	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2014-0496.nasl - Type : ACT_GATHER_INFO
2014-05-14	Name : The remote Windows host contains a version of Adobe AIR that is potentially a... File : adobe_air_apsb14-14.nasl - Type : ACT_GATHER_INFO
2014-05-14	Name : The remote Windows host has a browser plugin that is potentially affected by ... File : flash_player_apsb14-14.nasl - Type : ACT_GATHER_INFO
2014-05-14	Name : The remote host contains a web browser that is affected by multiple vulnerabi... File : google_chrome_34_0_1847_137.nasl - Type : ACT_GATHER_INFO
2014-05-14	Name : The remote Mac OS X host contains a version of Adobe AIR that is potentially ... File : macosx_adobe_air_13_0_0_111.nasl - Type : ACT_GATHER_INFO
2014-05-14	Name : The remote Windows host has a browser plugin that is potentially affected by ... File : macosx_flash_player_13_0_0_214.nasl - Type : ACT_GATHER_INFO
2014-05-14	Name : The remote Mac OS X host contains a web browser that is affected by multiple ... File : macosx_google_chrome_34_0_1847_137.nasl - Type : ACT_GATHER_INFO
2014-05-14	Name : The remote host has an ActiveX control installed that is affected by multiple... File : smb_kb2957151.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-06-12 13:24:11	Multiple Updates
2014-06-10 13:23:11	First insertion

Global Informations

Type	Count
CWE ID(s)	6
Oval ID(s)	9
CPE ID(s)	312
IAVM(s)	1
Snort® Rule(s)	18
Nessus® Exploit(s)	12

	Related
10	CVE-2014-0510
7.5	CVE-2014-0520
7.5	CVE-2014-0519
7.5	CVE-2014-0518
7.5	CVE-2014-0517
7.5	CVE-2014-0516
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 6 more Alert(s)

10 - GLSA-201406-08

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

Information Assurance Vulnerability Management (IAVM)

Snort® IPS/IDS

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU