10 - GLSA-201405-04

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	Adobe Flash Player: Multiple vulnerabilities

Informations
Name	GLSA-201405-04	First vendor Publication	2014-05-03
Vendor	Gentoo	Last vendor Modification	2014-05-03
Severity (Vendor)	Normal	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Synopsis

Multiple vulnerabilities have been found in Adobe Flash Player, the worst of which could result in execution of arbitrary code.

Background

The Adobe Flash Player is a renderer for the SWF file format, which is commonly used to provide interactive websites.

Description

Multiple vulnerabilities have been discovered in Adobe Flash Player.
Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to open a specially crafted SWF file using Adobe Flash Player, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker may be able to bypass the Same Origin Policy or read the clipboard via unspecified vectors.

Workaround

There is no known workaround at this time.

Resolution

All Adobe Flash Player users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot -v ">=www-plugins/adobe-flash-11.2.202.356"

References

[ 1 ] CVE-2014-0498 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0498
[ 2 ] CVE-2014-0499 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0499
[ 3 ] CVE-2014-0502 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0502
[ 4 ] CVE-2014-0503 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0503
[ 5 ] CVE-2014-0504 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0504
[ 6 ] CVE-2014-0506 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0506
[ 7 ] CVE-2014-0507 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0507
[ 8 ] CVE-2014-0508 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0508
[ 9 ] CVE-2014-0509 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0509
[ 10 ] CVE-2014-0515 : http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-0515

Availability

This GLSA and any updates to it are available for viewing at the Gentoo Security Website:

http://security.gentoo.org/glsa/glsa-201405-04.xml

Original Source

Url : http://security.gentoo.org/glsa/glsa-201405-04.xml

CWE : Common Weakness Enumeration

%	Id	Name
30 %	CWE-264	Permissions, Privileges, and Access Controls
30 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
10 %	CWE-415	Double Free
10 %	CWE-399	Resource Management Errors
10 %	CWE-200	Information Exposure
10 %	CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:22099

Oval ID:	oval:org.mitre.oval:def:22099
Title:	Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Description:	Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0503	Version:	9
Platform(s):	Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows 8 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player
Definition Synopsis:
Check the version of Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine the version of Adobe Flash Player is less than 11.7.700.272 and is greater than or equal 11.0 or is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than 11.7.700.272 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.272 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 AND Determine if the version of Adobe Flash Player is greater than or equal 11.8.0 OR Check the version of Adobe Flash Player 12 Adobe Flash Player 12 is installed AND Determine if the version of Adobe Flash Player is less than 12.0.0.77 and is greater than or equal 12.0 Determine if the version of Adobe Flash Player is less than 12.0.0.77 AND Determine if the version of Adobe Flash Player is greater than or equal 12.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx section Determine if the version of Flash.ocx is less than 11.7.700.272 and is greater than or equal 11.0 Determine if the version of Flash.ocx is less than 11.7.700.272 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Determine if the version of Flash.ocxr is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Flash.ocx is less than or equal 11.9.900.170 AND Determine if the version of Flash.ocx is greater than or equal 11.8.0 OR Determine if the version of Flash.ocx is less than 12.0.0.77 and is greater than or equal 12.0 Determine if the version of Flash.ocx is less than 12.0.0.77 AND Determine if the version of Flash.ocx is greater than or equal 12.0

Definition Id: oval:org.mitre.oval:def:22171

Oval ID:	oval:org.mitre.oval:def:22171
Title:	Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows allows attackers to read the clipboard via unspecified vectors.
Description:	Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0504	Version:	9
Platform(s):	Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows 8 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player
Definition Synopsis:
Check the version of Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine the version of Adobe Flash Player is less than 11.7.700.272 and is greater than or equal 11.0 or is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than 11.7.700.272 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.272 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 AND Determine if the version of Adobe Flash Player is greater than or equal 11.8.0 OR Check the version of Adobe Flash Player 12 Adobe Flash Player 12 is installed AND Determine if the version of Adobe Flash Player is less than 12.0.0.77 and is greater than or equal 12.0 Determine if the version of Adobe Flash Player is less than 12.0.0.77 AND Determine if the version of Adobe Flash Player is greater than or equal 12.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx section Determine if the version of Flash.ocx is less than 11.7.700.272 and is greater than or equal 11.0 Determine if the version of Flash.ocx is less than 11.7.700.272 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Determine if the version of Flash.ocxr is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Flash.ocx is less than or equal 11.9.900.170 AND Determine if the version of Flash.ocx is greater than or equal 11.8.0 OR Determine if the version of Flash.ocx is less than 12.0.0.77 and is greater than or equal 12.0 Determine if the version of Flash.ocx is less than 12.0.0.77 AND Determine if the version of Flash.ocx is greater than or equal 12.0

Definition Id: oval:org.mitre.oval:def:22201

Oval ID:	oval:org.mitre.oval:def:22201
Title:	Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK and Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors
Description:	Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0502	Version:	12
Platform(s):	Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows 8 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Check the version of Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine the version of Adobe Flash Player is less than 11.7.700.269 and is greater than or equal 11.0 or is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than 11.7.700.269 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.269 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 AND Determine if the version of Adobe Flash Player is greater than or equal 11.8.0 OR Check the version of Adobe Flash Player 12 Adobe Flash Player 12 is installed AND Determine if the version of Adobe Flash Player is less than 12.0.0.70 and is greater than or equal 12.0 Determine if the version of Adobe Flash Player is less than 12.0.0.70 AND Determine if the version of Adobe Flash Player is greater than or equal 12.0 OR Flash.ocx section Determine if the version of Flash.ocx is less than 11.7.700.269 and is greater than or equal 11.0 Determine if the version of Flash.ocx is less than 11.7.700.269 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Determine if the version of Flash.ocxr is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Flash.ocx is less than or equal 11.9.900.170 AND Determine if the version of Flash.ocx is greater than or equal 11.8.0 OR Determine if the version of Flash.ocx is less than 12.0.0.70 and is greater than or equal 12.0 Determine if the version of Flash.ocx is less than 12.0.0.70 AND Determine if the version of Flash.ocx is greater than or equal 12.0 AND Adobe AIR section Adobe AIR is installed AND Check if the version of Adobe AIR is less than 4.0.0.1628

Definition Id: oval:org.mitre.oval:def:22445

Oval ID:	oval:org.mitre.oval:def:22445
Title:	Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK and Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.
Description:	Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 do not prevent access to address information, which makes it easier for attackers to bypass the ASLR protection mechanism via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0499	Version:	12
Platform(s):	Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows 8 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Check the version of Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine the version of Adobe Flash Player is less than 11.7.700.269 and is greater than or equal 11.0 or is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than 11.7.700.269 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.269 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 AND Determine if the version of Adobe Flash Player is greater than or equal 11.8.0 OR Check the version of Adobe Flash Player 12 Adobe Flash Player 12 is installed AND Determine if the version of Adobe Flash Player is less than 12.0.0.70 and is greater than or equal 12.0 Determine if the version of Adobe Flash Player is less than 12.0.0.70 AND Determine if the version of Adobe Flash Player is greater than or equal 12.0 OR Flash.ocx section Determine if the version of Flash.ocx is less than 11.7.700.269 and is greater than or equal 11.0 Determine if the version of Flash.ocx is less than 11.7.700.269 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Determine if the version of Flash.ocxr is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Flash.ocx is less than or equal 11.9.900.170 AND Determine if the version of Flash.ocx is greater than or equal 11.8.0 OR Determine if the version of Flash.ocx is less than 12.0.0.70 and is greater than or equal 12.0 Determine if the version of Flash.ocx is less than 12.0.0.70 AND Determine if the version of Flash.ocx is greater than or equal 12.0 AND Adobe AIR section Adobe AIR is installed AND Check if the version of Adobe AIR is less than 4.0.0.1628

Definition Id: oval:org.mitre.oval:def:22568

Oval ID:	oval:org.mitre.oval:def:22568
Title:	Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK and Compiler before 4.0.0.1628 allows attackers to execute arbitrary code via unspecified vectors
Description:	Stack-based buffer overflow in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows attackers to execute arbitrary code via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0498	Version:	12
Platform(s):	Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows 8 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Check the version of Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine the version of Adobe Flash Player is less than 11.7.700.269 and is greater than or equal 11.0 or is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than 11.7.700.269 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.269 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Adobe Flash Player is less than or equal 11.9.900.170 AND Determine if the version of Adobe Flash Player is greater than or equal 11.8.0 OR Check the version of Adobe Flash Player 12 Adobe Flash Player 12 is installed AND Determine if the version of Adobe Flash Player is less than 12.0.0.70 and is greater than or equal 12.0 Determine if the version of Adobe Flash Player is less than 12.0.0.70 AND Determine if the version of Adobe Flash Player is greater than or equal 12.0 OR Flash.ocx section Determine if the version of Flash.ocx is less than 11.7.700.269 and is greater than or equal 11.0 Determine if the version of Flash.ocx is less than 11.7.700.269 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Determine if the version of Flash.ocxr is less than or equal 11.9.900.170 and is greater than or equal 11.8.0 Determine if the version of Flash.ocx is less than or equal 11.9.900.170 AND Determine if the version of Flash.ocx is greater than or equal 11.8.0 OR Determine if the version of Flash.ocx is less than 12.0.0.70 and is greater than or equal 12.0 Determine if the version of Flash.ocx is less than 12.0.0.70 AND Determine if the version of Flash.ocx is greater than or equal 12.0 AND Adobe AIR section Adobe AIR is installed AND Check if the version of Adobe AIR is less than 4.0.0.1628

Definition Id: oval:org.mitre.oval:def:23209

Oval ID:	oval:org.mitre.oval:def:23209
Title:	ELSA-2014:0196: flash-plugin security update (Critical)
Description:	Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014:0196-00 CVE-2014-0498 CVE-2014-0499 CVE-2014-0502	Version:	17
Platform(s):	Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
flash-plugin is earlier than 0:11.2.202.341-1.el6 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:23928

Oval ID:	oval:org.mitre.oval:def:23928
Title:	RHSA-2014:0289: flash-plugin security update (Moderate)
Description:	Adobe Flash Player before 11.7.700.272 and 11.8.x through 12.0.x before 12.0.0.77 on Windows and OS X, and before 11.2.202.346 on Linux, allows attackers to read the clipboard via unspecified vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:0289-00 CVE-2014-0503 CVE-2014-0504	Version:	9
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	flash-plugin
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:11.2.202.346-1.el5 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 AND flash-plugin is earlier than 0:11.2.202.346-1.el6

Definition Id: oval:org.mitre.oval:def:23994

Oval ID:	oval:org.mitre.oval:def:23994
Title:	DEPRECATED: ELSA-2014:0447: flash-plugin security update (Critical)
Description:	The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes one vulnerability in Adobe Flash Player. This vulnerability is detailed in the Adobe Security Bulletin APSB14-13, listed in the References section. A flaw was found in the way flash-plugin displayed certain SWF content. An attacker could use this flaw to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2014-0515) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.356.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014:0447-00 CVE-2014-0515	Version:	5
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
rpm test Oracle Linux 5.x AND flash-plugin is earlier than 0:11.2.202.356-1.el5 OR rpm test flash-plugin is earlier than 0:11.2.202.356-1.el6 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:24148

Oval ID:	oval:org.mitre.oval:def:24148
Title:	ELSA-2014:0447: flash-plugin security update (Critical)
Description:	The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes one vulnerability in Adobe Flash Player. This vulnerability is detailed in the Adobe Security Bulletin APSB14-13, listed in the References section. A flaw was found in the way flash-plugin displayed certain SWF content. An attacker could use this flaw to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2014-0515) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.356.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014:0447-00 CVE-2014-0515	Version:	5
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
rpm test Oracle Linux 5.x AND flash-plugin is earlier than 0:11.2.202.356-1.el5 OR rpm test flash-plugin is earlier than 0:11.2.202.356-1.el6 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:24162

Oval ID:	oval:org.mitre.oval:def:24162
Title:	RHSA-2014:0196: flash-plugin security update (Critical)
Description:	Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:0196-00 CVE-2014-0498 CVE-2014-0499 CVE-2014-0502	Version:	18
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	flash-plugin
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:11.2.202.341-1.el5 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 AND flash-plugin is earlier than 0:11.2.202.341-1.el6

Definition Id: oval:org.mitre.oval:def:24315

Oval ID:	oval:org.mitre.oval:def:24315
Title:	ELSA-2014:0289: flash-plugin security update (Moderate)
Description:	The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes two vulnerabilities in Adobe Flash Player. These vulnerabilities are detailed in the Adobe Security bulletin APSB14-08, listed in the References section. A vulnerability was reported that could be used to bypass the same origin policy. (CVE-2014-0503) A vulnerability was reported that could be used to read the contents of the clipboard. (CVE-2014-0504) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.346.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014:0289-00 CVE-2014-0503 CVE-2014-0504	Version:	6
Platform(s):	Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
flash-plugin is earlier than 0:11.2.202.346-1.el6 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:24368

Oval ID:	oval:org.mitre.oval:def:24368
Title:	Cross-site scripting vulnerability in Adobe Flash Player which less then 12.0.0.77 and less then 11.7.700.275 and Adobe AIR before 13.0.0.83
Description:	Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0509	Version:	9
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Check the version of Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than 11.7.700.275 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.275 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Check the version of Adobe Flash Player 12 Adobe Flash Player 12 is installed AND Determine if the version of Adobe Flash Player is less than or equal 12.0.0.77 and is greater than or equal 12.0 Determine if the version of Adobe Flash Player is less than or equal 12.0.0.77 AND Determine if the version of Adobe Flash Player is greater than or equal 12.0 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less 13.0.0.83 AND Determine if the version of Adobe Air is greater than or equal 1.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 11 section Determine if the version of Flash.ocx is less than 11.7.700.275 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 12 section Determine if the version of Flash.ocx is less than or equal 12.0.0.77 AND Determine if the version of Flash.ocx is greater than or equal 12.0

Definition Id: oval:org.mitre.oval:def:24439

Oval ID:	oval:org.mitre.oval:def:24439
Title:	RHSA-2014:0380: flash-plugin security update (Critical)
Description:	The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities are detailed in the Adobe Security Bulletin APSB14-09, listed in the References section. Two flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2014-0506, CVE-2014-0507) A flaw in flash-plugin could allow an attacker to obtain sensitive information if a victim were tricked into visiting a specially crafted web page. (CVE-2014-0508) A flaw in flash-plugin could allow an attacker to conduct cross-site scripting (XSS) attacks if a victim were tricked into visiting a specially crafted web page. (CVE-2014-0509) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.350.
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:0380-00 CVE-2014-0506 CVE-2014-0507 CVE-2014-0508 CVE-2014-0509	Version:	5
Platform(s):	Red Hat Enterprise Linux 6 Red Hat Enterprise Linux 5	Product(s):	flash-plugin
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:11.2.202.350-1.el5 AND Red Hat Enterprise Linux 6 release section The operating system installed on the system is Red Hat Enterprise Linux 6 AND flash-plugin is earlier than 0:11.2.202.350-1.el6

Definition Id: oval:org.mitre.oval:def:24561

Oval ID:	oval:org.mitre.oval:def:24561
Title:	Vulnerability in Adobe Flash Player which less then 12.0.0.77 and less then 11.7.700.275 and Adobe AIR before 13.0.0.83
Description:	Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0508	Version:	9
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Check the version of Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than 11.7.700.275 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.275 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Check the version of Adobe Flash Player 12 Adobe Flash Player 12 is installed AND Determine if the version of Adobe Flash Player is less than or equal 12.0.0.77 and is greater than or equal 12.0 Determine if the version of Adobe Flash Player is less than or equal 12.0.0.77 AND Determine if the version of Adobe Flash Player is greater than or equal 12.0 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less 13.0.0.83 AND Determine if the version of Adobe Air is greater than or equal 1.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 11 section Determine if the version of Flash.ocx is less than 11.7.700.275 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 12 section Determine if the version of Flash.ocx is less than or equal 12.0.0.77 AND Determine if the version of Flash.ocx is greater than or equal 12.0

Definition Id: oval:org.mitre.oval:def:24613

Oval ID:	oval:org.mitre.oval:def:24613
Title:	Buffer overflow vulnerability in Adobe Flash Player which less then 12.0.0.77 and less then 11.7.700.275 and Adobe AIR before 13.0.0.83
Description:	Buffer overflow in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows attackers to execute arbitrary code via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0507	Version:	9
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Check the version of Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than 11.7.700.275 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.275 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Check the version of Adobe Flash Player 12 Adobe Flash Player 12 is installed AND Determine if the version of Adobe Flash Player is less than or equal 12.0.0.77 and is greater than or equal 12.0 Determine if the version of Adobe Flash Player is less than or equal 12.0.0.77 AND Determine if the version of Adobe Flash Player is greater than or equal 12.0 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less 13.0.0.83 AND Determine if the version of Adobe Air is greater than or equal 1.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 11 section Determine if the version of Flash.ocx is less than 11.7.700.275 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 12 section Determine if the version of Flash.ocx is less than or equal 12.0.0.77 AND Determine if the version of Flash.ocx is greater than or equal 12.0

Definition Id: oval:org.mitre.oval:def:24647

Oval ID:	oval:org.mitre.oval:def:24647
Title:	ELSA-2014:0380: flash-plugin security update (Critical)
Description:	The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities are detailed in the Adobe Security Bulletin APSB14-09, listed in the References section. Two flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2014-0506, CVE-2014-0507) A flaw in flash-plugin could allow an attacker to obtain sensitive information if a victim were tricked into visiting a specially crafted web page. (CVE-2014-0508) A flaw in flash-plugin could allow an attacker to conduct cross-site scripting (XSS) attacks if a victim were tricked into visiting a specially crafted web page. (CVE-2014-0509) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.350.
Family:	unix	Class:	patch
Reference(s):	ELSA-2014:0380-00 CVE-2014-0506 CVE-2014-0507 CVE-2014-0508 CVE-2014-0509	Version:	5
Platform(s):	Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
Oracle Linux 6.x AND flash-plugin is earlier than 0:11.2.202.350-1.el6

Definition Id: oval:org.mitre.oval:def:24650

Oval ID:	oval:org.mitre.oval:def:24650
Title:	RHSA-2014:0447: flash-plugin security update (Critical)
Description:	The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes one vulnerability in Adobe Flash Player. This vulnerability is detailed in the Adobe Security Bulletin APSB14-13, listed in the References section. A flaw was found in the way flash-plugin displayed certain SWF content. An attacker could use this flaw to create a specially crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the malicious SWF content. (CVE-2014-0515) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 11.2.202.356.
Family:	unix	Class:	patch
Reference(s):	RHSA-2014:0447-00 CVE-2014-0515	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6	Product(s):	flash-plugin
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:11.2.202.356-1.el5 AND Operation system section flash-plugin is earlier than 0:11.2.202.356-1.el6 AND The operating system installed on the system is Red Hat Enterprise Linux 6

Definition Id: oval:org.mitre.oval:def:24657

Oval ID:	oval:org.mitre.oval:def:24657
Title:	Use-after-free vulnerability in Adobe Flash Player which less then 12.0.0.77 and less then 11.7.700.275 and Adobe AIR before 13.0.0.83
Description:	Use-after-free vulnerability in Adobe Flash Player before 11.7.700.275 and 11.8.x through 13.0.x before 13.0.0.182 on Windows and OS X and before 11.2.202.350 on Linux, Adobe AIR before 13.0.0.83 on Android, Adobe AIR SDK before 13.0.0.83, and Adobe AIR SDK & Compiler before 13.0.0.83 allows remote attackers to execute arbitrary code, and possibly bypass an Internet Explorer sandbox protection mechanism, via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0506	Version:	9
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Check the version of Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than 11.7.700.275 and is greater than or equal 11.0 Determine if the version of Adobe Flash Player is less than 11.7.700.275 AND Determine if the version of Adobe Flash Player is greater than or equal 11.0 OR Check the version of Adobe Flash Player 12 Adobe Flash Player 12 is installed AND Determine if the version of Adobe Flash Player is less than or equal 12.0.0.77 and is greater than or equal 12.0 Determine if the version of Adobe Flash Player is less than or equal 12.0.0.77 AND Determine if the version of Adobe Flash Player is greater than or equal 12.0 OR Determine if the version of Adobe Air is less than or equal 3.2.0.2070 and is greater than or equal 1.0 Adobe AIR is installed AND Determine if the version of Adobe Air is less 13.0.0.83 AND Determine if the version of Adobe Air is greater than or equal 1.0 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 11 section Determine if the version of Flash.ocx is less than 11.7.700.275 AND Determine if the version of Flash.ocx is greater than or equal 11.0 OR Flash.ocx 12 section Determine if the version of Flash.ocx is less than or equal 12.0.0.77 AND Determine if the version of Flash.ocx is greater than or equal 12.0

Definition Id: oval:org.mitre.oval:def:24683

Oval ID:	oval:org.mitre.oval:def:24683
Title:	Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.
Description:	Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.202.356 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in April 2014.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2014-0515	Version:	8
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player
Definition Synopsis:
Check for vulnerable Adobe Flash Player 11 Adobe Flash Player 11 is installed AND Determine if the version of Adobe Flash Player is less than 11.7.700.279 OR Check for vulnerable Adobe Flash Player 13 Determine if the version of Adobe Flash Player is greater than or equal 11.8 AND Determine if the version of Adobe Flash Player is less than 13.0.0.206 OR Flash.ocx section ActiveX Control is installed AND Determine if the version of Flash.ocx is less than 11.7.700.279

Definition Id: oval:org.mitre.oval:def:24868

Oval ID:	oval:org.mitre.oval:def:24868
Title:	SUSE-SU-2014:0605-1 -- Security update for flash-player
Description:	This flash-player update to version 11.2.202.356 fixes the following critical security issue: * bnc#875577: buffer overflow vulnerability that leads to arbitrary code execution (CVE-2014-0515) Adobe Security Bulletin (APSB14-13) http://helpx.adobe.com/security/products/flash-player/apsb14 -13.html <http://helpx.adobe.com/security/products/flash-player/apsb1 4-13.html> Security Issue reference: * CVE-2014-0515 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0515 >
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0605-1 CVE-2014-0515	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 11	Product(s):	flash-player
Definition Synopsis:
SUSE Linux Enterprise Desktop 11.x is installed Packages match section flash-player RPM is earlier than 0:11.2.202.356-0.3.1 AND flash-player-gnome RPM is earlier than 0:11.2.202.356-0.3.1 AND flash-player-kde4 RPM is earlier than 0:11.2.202.356-0.3.1

Definition Id: oval:org.mitre.oval:def:25399

Oval ID:	oval:org.mitre.oval:def:25399
Title:	SUSE-SU-2014:0290-1 -- Security update for flash-player
Description:	This update of Adobe Flash Player fixes the following issues: * A stack overflow vulnerability that could have resulted in arbitrary code execution. (CVE-2014-0498) * A memory leak vulnerability that could have been used to defeat memory address layout randomization. (CVE-2014-0499) * A double free vulnerability that could have resulted in arbitrary code execution. (CVE-2014-0502)
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0290-1 CVE-2014-0498 CVE-2014-0499 CVE-2014-0502	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 11	Product(s):	flash-player
Definition Synopsis:
SUSE Linux Enterprise Desktop 11.x is installed Packages match section flash-player RPM is earlier than 0:11.2.202.341-0.3.1 AND flash-player-gnome RPM is earlier than 0:11.2.202.341-0.3.1 AND flash-player-kde4 RPM is earlier than 0:11.2.202.341-0.3.1

Definition Id: oval:org.mitre.oval:def:25512

Oval ID:	oval:org.mitre.oval:def:25512
Title:	SUSE-SU-2014:0387-1 -- Security update for flash-player
Description:	Adobe Flash Player was updated to version 11.2.202.346 to fix security issues.
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0387-1 CVE-2014-0503 CVE-2014-0504	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 11	Product(s):	flash-player
Definition Synopsis:
SUSE Linux Enterprise Desktop 11.x is installed Packages match section flash-player RPM is earlier than 0:11.2.202.346-0.3.1 AND flash-player-gnome RPM is earlier than 0:11.2.202.346-0.3.1 AND flash-player-kde4 RPM is earlier than 0:11.2.202.346-0.3.1

Definition Id: oval:org.mitre.oval:def:25532

Oval ID:	oval:org.mitre.oval:def:25532
Title:	SUSE-SU-2014:0535-1 -- Security update for flash-player
Description:	Adobe flash-player has been updated to version 11.2.202.350 to resolve security issues and bugs. More information can be found at http://helpx.adobe.com/security/products/flash-player/apsb14 -09.html <http://helpx.adobe.com/security/products/flash-player/apsb1 4-09.html> The following security issues have been fixed: * a use-after-free vulnerability that could have resulted in arbitrary code execution (CVE-2014-0506). * a buffer overflow vulnerability that could have resulted in arbitrary code execution (CVE-2014-0507). * a security bypass vulnerability that could have lead to information disclosure (CVE-2014-0508). * a cross-site-scripting vulnerability (CVE-2014-0509).
Family:	unix	Class:	patch
Reference(s):	SUSE-SU-2014:0535-1 CVE-2014-0506 CVE-2014-0507 CVE-2014-0508 CVE-2014-0509	Version:	3
Platform(s):	SUSE Linux Enterprise Desktop 11	Product(s):	flash-player
Definition Synopsis:
SUSE Linux Enterprise Desktop 11.x is installed Packages match section flash-player RPM is earlier than 0:11.2.202.350-0.3.1 AND flash-player-gnome RPM is earlier than 0:11.2.202.350-0.3.1 AND flash-player-kde4 RPM is earlier than 0:11.2.202.350-0.3.1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Adobe Adobe Air cpe:2.3:a:adobe:adobe_air:4.0.0.1390:::::::* cpe:2.3:a:adobe:adobe_air:3.9.0.1380:::::::* cpe:2.3:a:adobe:adobe_air:3.9.0.1210:::::::* cpe:2.3:a:adobe:adobe_air:3.9.0.1060:::::::* cpe:2.3:a:adobe:adobe_air:3.9.0.1030:::::::* cpe:2.3:a:adobe:adobe_air:3.8.0.910:::::::* cpe:2.3:a:adobe:adobe_air:3.8.0.870:::::::* cpe:2.3:a:adobe:adobe_air:3.7.0.2090:::::::* cpe:2.3:a:adobe:adobe_air:3.7.0.1860:::::::* cpe:2.3:a:adobe:adobe_air:3.7.0.1530:::::::* cpe:2.3:a:adobe:adobe_air:3.6.0.6090:::::::* cpe:2.3:a:adobe:adobe_air:3.6.0.597:::::::* cpe:2.3:a:adobe:adobe_air:3.5.0.890:::::::* cpe:2.3:a:adobe:adobe_air:3.5.0.880:::::::* cpe:2.3:a:adobe:adobe_air:3.5.0.600:::::::* cpe:2.3:a:adobe:adobe_air:3.5.0.1060:::::::* cpe:2.3:a:adobe:adobe_air:3.4.0.2710:::::::* cpe:2.3:a:adobe:adobe_air:3.4.0.2540:::::::* cpe:2.3:a:adobe:adobe_air:3.3.0.3670:::::::* cpe:2.3:a:adobe:adobe_air:3.2.0.2070:::::::* cpe:2.3:a:adobe:adobe_air:3.2.0.207:::::::* cpe:2.3:a:adobe:adobe_air:3.1.0.4880:::::::* cpe:2.3:a:adobe:adobe_air:3.1.0.488:::::::* cpe:2.3:a:adobe:adobe_air:3.1.0.485:::::::* cpe:2.3:a:adobe:adobe_air:3.0.0.4080:::::::* cpe:2.3:a:adobe:adobe_air:3.0.0.408:::::::* cpe:2.3:a:adobe:adobe_air:2.7.1.19610:::::::* cpe:2.3:a:adobe:adobe_air:2.7.1:::::::* cpe:2.3:a:adobe:adobe_air:2.7.0.19530:::::::* cpe:2.3:a:adobe:adobe_air:2.7.0.1953:::::::* cpe:2.3:a:adobe:adobe_air:2.7.0.19480:::::::* cpe:2.3:a:adobe:adobe_air:2.7.0.1948:::::::* cpe:2.3:a:adobe:adobe_air:2.7:::::::* cpe:2.3:a:adobe:adobe_air:2.6.0.19140:::::::* cpe:2.3:a:adobe:adobe_air:2.6.0.19120:::::::* cpe:2.3:a:adobe:adobe_air:2.6:::::::* cpe:2.3:a:adobe:adobe_air:2.5.1.17730:::::::* cpe:2.3:a:adobe:adobe_air:2.5.0.16600:::::::* cpe:2.3:a:adobe:adobe_air:2.0.4:::::::* cpe:2.3:a:adobe:adobe_air:2.0.3.13070:::::::* cpe:2.3:a:adobe:adobe_air:2.0.3:::::::* cpe:2.3:a:adobe:adobe_air:2.0.2.12610:::::::* cpe:2.3:a:adobe:adobe_air:2.0.2:::::::* cpe:2.3:a:adobe:adobe_air:1.5.3.9130:::::::* cpe:2.3:a:adobe:adobe_air:1.5.3.9120:::::::* cpe:2.3:a:adobe:adobe_air:1.5.3:::::::* cpe:2.3:a:adobe:adobe_air:1.5.2:::::::* cpe:2.3:a:adobe:adobe_air:1.5.1.8210:::::::* cpe:2.3:a:adobe:adobe_air:1.5.1:::::::* cpe:2.3:a:adobe:adobe_air:1.5.0.7220:::::::* cpe:2.3:a:adobe:adobe_air:1.5:::::::* cpe:2.3:a:adobe:adobe_air:1.1.0.5790:::::::* cpe:2.3:a:adobe:adobe_air:1.1:::::::* cpe:2.3:a:adobe:adobe_air:1.0.8.4990:::::::* cpe:2.3:a:adobe:adobe_air:1.0.4990:::::::* cpe:2.3:a:adobe:adobe_air:1.0.1:::::::* cpe:2.3:a:adobe:adobe_air:1.0:::::::* cpe:2.3:a:adobe:adobe_air:::::::: cpe:2.3:a:adobe:adobe_air:-:::::::*	59
Application	Adobe Adobe Air Sdk cpe:2.3:a:adobe:adobe_air_sdk:4.0.0.1390:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.9.0.1380:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.9.0.1210:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.9.0.1030:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.8.0.910:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.8.0.870:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.8.0.1430:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.7.0.2090:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.7.0.1860:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.7.0.1530:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.6.0.6090:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.6.0.599:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.5.0.890:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.5.0.880:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.5.0.600:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.5.0.1060:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.4.0.2710:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.4.0.2540:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.3.0.3690:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.3.0.3650:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.2.0.2070:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.1.0.488:::::::* cpe:2.3:a:adobe:adobe_air_sdk:3.0.0.4080:::::::*	23
Application	Adobe Flash Player cpe:2.3:a:adobe:flash_player:13.0.0.201:::::::* cpe:2.3:a:adobe:flash_player:13.0.0.182:::::::* cpe:2.3:a:adobe:flash_player:13.0::::esr::: cpe:2.3:a:adobe:flash_player:12.0.0.77:::::::* cpe:2.3:a:adobe:flash_player:12.0.0.70:::::::* cpe:2.3:a:adobe:flash_player:12.0.0.44:::::::* cpe:2.3:a:adobe:flash_player:12.0.0.43:::::::* cpe:2.3:a:adobe:flash_player:12.0.0.41:::::::* cpe:2.3:a:adobe:flash_player:12.0.0.38:::::::* cpe:2.3:a:adobe:flash_player:11.9.900.700:::::::* cpe:2.3:a:adobe:flash_player:11.9.900.170:::::::* cpe:2.3:a:adobe:flash_player:11.9.900.152:::::::* cpe:2.3:a:adobe:flash_player:11.9.900.117:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.97:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.94:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.175:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.174:::::::* cpe:2.3:a:adobe:flash_player:11.8.800.168:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.279:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.275:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.272:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.269:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.261:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.260:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.257:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.252:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.242:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.232:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.225:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.224:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.203:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.202:::::::* cpe:2.3:a:adobe:flash_player:11.7.700.169:::::::* cpe:2.3:a:adobe:flash_player:11.6.602.180:::::::* cpe:2.3:a:adobe:flash_player:11.6.602.171:::::::* cpe:2.3:a:adobe:flash_player:11.6.602.168:::::::* cpe:2.3:a:adobe:flash_player:11.6.602.167:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.149:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.146:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.136:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.135:::::::* cpe:2.3:a:adobe:flash_player:11.5.502.110:::::::* cpe:2.3:a:adobe:flash_player:11.4.402.287:::::::* cpe:2.3:a:adobe:flash_player:11.4.402.278:::::::* cpe:2.3:a:adobe:flash_player:11.4.402.265:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.273:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.271:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.270:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.268:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.265:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.262:::::::* cpe:2.3:a:adobe:flash_player:11.3.300.257:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.644:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.643:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.637:::::linux:: cpe:2.3:a:adobe:flash_player:11.2.202.637:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.635:::::linux:: cpe:2.3:a:adobe:flash_player:11.2.202.635:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.632:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.626:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.621:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.616:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.577:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.569:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.559:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.554:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.548:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.540:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.535:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.521:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.508:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.491:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.481:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.475:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.468:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.466:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.460:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.457:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.451:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.442:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.440:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.438:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.429:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.425:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.424:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.423:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.418:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.411:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.406:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.400:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.394:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.378:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.359:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.356:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.350:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.346:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.341:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.336:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.335:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.332:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.327:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.310:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.297:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.291:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.285:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.280:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.275:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.273:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.270:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.262:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.261:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.258:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.251:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.243:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.238:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.236:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.235:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.233:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.228:::::::* cpe:2.3:a:adobe:flash_player:11.2.202.223:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.81:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.7:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.69:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.63:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.59:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.58:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.54:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.48:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.36:::::::* cpe:2.3:a:adobe:flash_player:11.1.115.34:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.8:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.73:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.7:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.64:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.6:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.54:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.50:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.5:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.44:::::::* cpe:2.3:a:adobe:flash_player:11.1.111.13:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.63:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.62:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.59:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.55:::::::* cpe:2.3:a:adobe:flash_player:11.1.102.55::%7E%7E%7E%7Ex64%7E::::: cpe:2.3:a:adobe:flash_player:11.1.102.55::::::x64: cpe:2.3:a:adobe:flash_player:11.1:::::::* cpe:2.3:a:adobe:flash_player:11.0.1.153:::::::* cpe:2.3:a:adobe:flash_player:11.0.1.152:::::::* cpe:2.3:a:adobe:flash_player:11.0.1.152::%7E%7E%7E%7Ex64%7E::::: cpe:2.3:a:adobe:flash_player:11.0.1.152::::::x64: cpe:2.3:a:adobe:flash_player:11.0:::::::* cpe:2.3:a:adobe:flash_player:10.3.186.7:::::::* cpe:2.3:a:adobe:flash_player:10.3.186.6:::::::* cpe:2.3:a:adobe:flash_player:10.3.186.3:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.25:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.24:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.22:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.21:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.86:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.75:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.7:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.68:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.67:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.63:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.61:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.51:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.50:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.5:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.48:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.43:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.29:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.25:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.20:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.19:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.18:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.16:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.15:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.11:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.10:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.36:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.34:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.26:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.22:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.16:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.14:::::::* cpe:2.3:a:adobe:flash_player:10.3.:::::::* cpe:2.3:a:adobe:flash_player:10.3:::::::* cpe:2.3:a:adobe:flash_player:10.2.159.1:::::::* cpe:2.3:a:adobe:flash_player:10.2.157.51:::::::* cpe:2.3:a:adobe:flash_player:10.2.156.12:::::::* cpe:2.3:a:adobe:flash_player:10.2.154.25:::::::* cpe:2.3:a:adobe:flash_player:10.2.154.13:::::::* cpe:2.3:a:adobe:flash_player:10.2.153.1:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.33:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.32:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.26:::::::* cpe:2.3:a:adobe:flash_player:10.2.152:::::::* cpe:2.3:a:adobe:flash_player:10.1.95.2:::::::* cpe:2.3:a:adobe:flash_player:10.1.95.1:::::::* cpe:2.3:a:adobe:flash_player:10.1.92.8:::::::* cpe:2.3:a:adobe:flash_player:10.1.92.10:::::::* cpe:2.3:a:adobe:flash_player:10.1.85.3:::::::* cpe:2.3:a:adobe:flash_player:10.1.82.76:::::::* cpe:2.3:a:adobe:flash_player:10.1.53.64:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.15:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.14.1:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.14:::::::* cpe:2.3:a:adobe:flash_player:10.1.106.17:::::::* cpe:2.3:a:adobe:flash_player:10.1.106.16:::::::* cpe:2.3:a:adobe:flash_player:10.1.105.6:::::::* cpe:2.3:a:adobe:flash_player:10.1.102.64:::::::* cpe:2.3:a:adobe:flash_player:10.1:::::::* cpe:2.3:a:adobe:flash_player:10.0.45.2:::::::* cpe:2.3:a:adobe:flash_player:10.0.42.34:::::::* cpe:2.3:a:adobe:flash_player:10.0.32.18:::::::* cpe:2.3:a:adobe:flash_player:10.0.22.87:::::::* cpe:2.3:a:adobe:flash_player:10.0.2.54:::::::* cpe:2.3:a:adobe:flash_player:10.0.15.3:::::::* cpe:2.3:a:adobe:flash_player:10.0.12.36:::::::* cpe:2.3:a:adobe:flash_player:10.0.12.10:::::::* cpe:2.3:a:adobe:flash_player:10.0.0.584:::::::* cpe:2.3:a:adobe:flash_player:10:::::::* cpe:2.3:a:adobe:flash_player:9.125.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.9.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.8.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.48.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.47.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.45.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.31.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.31:::::::* cpe:2.3:a:adobe:flash_player:9.0.283.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.280:::::::* cpe:2.3:a:adobe:flash_player:9.0.28.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.28.0::mac_os_x::::: cpe:2.3:a:adobe:flash_player:9.0.28:::::::* cpe:2.3:a:adobe:flash_player:9.0.277.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.262.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.260.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.246.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.20.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.20:::::::* cpe:2.3:a:adobe:flash_player:9.0.18d60:::::::* cpe:2.3:a:adobe:flash_player:9.0.16.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.16:::::::* cpe:2.3:a:adobe:flash_player:9.0.16::windows::::: cpe:2.3:a:adobe:flash_player:9.0.159.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.155.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.152.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.151.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.125.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.124.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.115.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.114.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.112.0:::::::* cpe:2.3:a:adobe:flash_player:9.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.42.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.39.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.35.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.34.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.33.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.24.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.22.0:::::::* cpe:2.3:a:adobe:flash_player:8.0:::::::* cpe:2.3:a:adobe:flash_player:8.0::pro::::: cpe:2.3:a:adobe:flash_player:8.0::basic::::: cpe:2.3:a:adobe:flash_player:8::professional::::: cpe:2.3:a:adobe:flash_player:8::pro::::: cpe:2.3:a:adobe:flash_player:7.2:::::::* cpe:2.3:a:adobe:flash_player:7.1.1:::::::* cpe:2.3:a:adobe:flash_player:7.1:::::::* cpe:2.3:a:adobe:flash_player:7.0.73.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.70.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.69.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.68.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.67.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.66.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.63:::::::* cpe:2.3:a:adobe:flash_player:7.0.63::linux::::: cpe:2.3:a:adobe:flash_player:7.0.61.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.60.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.53.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.25:::::::* cpe:2.3:a:adobe:flash_player:7.0.24.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.19.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.14.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.1:::::::* cpe:2.3:a:adobe:flash_player:7.0_r67::solaris::::: cpe:2.3:a:adobe:flash_player:7.0_r67:::::::* cpe:2.3:a:adobe:flash_player:7.0:::::::* cpe:2.3:a:adobe:flash_player:6.0.79:::::::* cpe:2.3:a:adobe:flash_player:6.0.21.0:::::::* cpe:2.3:a:adobe:flash_player:6:::::::* cpe:2.3:a:adobe:flash_player:5:::::::* cpe:2.3:a:adobe:flash_player:4:::::::* cpe:2.3:a:adobe:flash_player:3:::::::* cpe:2.3:a:adobe:flash_player:2:::::::* cpe:2.3:a:adobe:flash_player:mx_2004:::::::* cpe:2.3:a:adobe:flash_player:cs4::pro::::: cpe:2.3:a:adobe:flash_player:cs3::pro::::: cpe:2.3:a:adobe:flash_player:cs3::professional::::: cpe:2.3:a:adobe:flash_player:::::::: cpe:2.3:a:adobe:flash_player:::basic:::::* cpe:2.3:a:adobe:flash_player:::pro:::::* cpe:2.3:a:adobe:flash_player::::::edge::* cpe:2.3:a:adobe:flash_player::::::internet_explorer_11::* cpe:2.3:a:adobe:flash_player::::::chrome::* cpe:2.3:a:adobe:flash_player:-:::::::*	311

SAINT Exploits

Description	Link
Adobe Pixel Shader	More info here

ExploitDB Exploits

id	Description
2014-05-12	Adobe Flash Player Shader Buffer Overflow

Information Assurance Vulnerability Management (IAVM)

Date	Description
2014-05-01	IAVM : 2014-A-0060 - Adobe Flash Player Buffer Overflow Vulnerability Severity : Category I - VMSKEY : V0050013
2014-04-10	IAVM : 2014-A-0047 - Multiple Vulnerabilities in Adobe Flash Player and AIR Severity : Category I - VMSKEY : V0048681
2014-03-13	IAVM : 2014-A-0034 - Multiple Vulnerabilities in Adobe Flash Player Severity : Category I - VMSKEY : V0046181
2014-02-27	IAVM : 2014-A-0029 - Multiple Vulnerabilities in Adobe Flash Player and AIR Severity : Category I - VMSKEY : V0044537

Snort® IPS/IDS

Date	Description
2016-04-05	Adobe Flash pixel bender buffer overflow attempt RuleID : 37940 - Revision : 2 - Type : FILE-MULTIMEDIA
2016-04-05	Adobe Flash pixel bender buffer overflow attempt RuleID : 37939 - Revision : 3 - Type : FILE-MULTIMEDIA
2016-04-05	Adobe Flash pixel bender buffer overflow attempt RuleID : 37938 - Revision : 3 - Type : FILE-MULTIMEDIA
2016-04-05	Adobe Flash pixel bender buffer overflow attempt RuleID : 37937 - Revision : 2 - Type : FILE-MULTIMEDIA
2016-03-18	Adobe Flash Player worker shared object user-after-free attempt RuleID : 37685 - Revision : 2 - Type : FILE-FLASH
2016-03-18	Adobe Flash Player worker shared object user-after-free attempt RuleID : 37684 - Revision : 2 - Type : FILE-FLASH
2015-04-30	Nuclear exploit kit obfuscated file download RuleID : 33983 - Revision : 5 - Type : EXPLOIT-KIT
2015-04-30	Nuclear exploit kit landing page detected RuleID : 33982 - Revision : 3 - Type : EXPLOIT-KIT
2015-04-30	Nuclear exploit kit flash file download RuleID : 33981 - Revision : 4 - Type : EXPLOIT-KIT
2014-12-02	Adobe Flash Player worker shared object use-after-free attempt RuleID : 32360 - Revision : 4 - Type : FILE-FLASH
2014-12-02	Adobe Flash Player worker shared object use-after-free attempt RuleID : 32359 - Revision : 8 - Type : FILE-FLASH
2014-09-23	Astrum exploit kit Adobe Flash exploit payload request RuleID : 31968-community - Revision : 1 - Type : EXPLOIT-KIT
2014-11-16	Astrum exploit kit Adobe Flash exploit payload request RuleID : 31968 - Revision : 2 - Type : EXPLOIT-KIT
2014-11-16	Adobe Flash pixel bender buffer overflow attempt RuleID : 31524 - Revision : 3 - Type : FILE-MULTIMEDIA
2014-11-16	Adobe Flash pixel bender buffer overflow attempt RuleID : 31523 - Revision : 3 - Type : FILE-MULTIMEDIA
2014-11-16	Adobe Flash pixel bender buffer overflow attempt RuleID : 31522 - Revision : 3 - Type : FILE-MULTIMEDIA
2014-11-16	Adobe Flash pixel bender buffer overflow attempt RuleID : 31521 - Revision : 4 - Type : FILE-MULTIMEDIA
2014-11-16	Adobe Flash pixel bender buffer overflow attempt RuleID : 31520 - Revision : 3 - Type : FILE-MULTIMEDIA
2014-11-16	Adobe Flash pixel bender buffer overflow attempt RuleID : 31519 - Revision : 4 - Type : FILE-MULTIMEDIA
2014-11-16	CottonCastle exploit kit decryption page outbound request RuleID : 31279 - Revision : 3 - Type : EXPLOIT-KIT
2014-11-16	CottonCastle exploit kit Adobe flash outbound connection RuleID : 31276 - Revision : 4 - Type : EXPLOIT-KIT
2014-05-28	Adobe Flash pixel bender buffer overflow attempt RuleID : 30877 - Revision : 5 - Type : FILE-MULTIMEDIA
2014-05-28	Adobe Flash pixel bender buffer overflow attempt RuleID : 30876 - Revision : 4 - Type : FILE-MULTIMEDIA
2014-05-28	Adobe Flash Player SWF ActionScript exploit attempt RuleID : 30846 - Revision : 3 - Type : FILE-FLASH
2014-05-28	Adobe Flash Player SWF ActionScript exploit attempt RuleID : 30845 - Revision : 3 - Type : FILE-FLASH
2014-05-28	Adobe Acrobat Reader cross-site scripting attempt RuleID : 30844 - Revision : 3 - Type : FILE-FLASH
2014-05-28	Adobe Acrobat Reader cross-site scripting attempt RuleID : 30843 - Revision : 3 - Type : FILE-FLASH
2014-05-15	Adobe Flash Player navigateToUrl hidden channel to file creation RuleID : 30540 - Revision : 3 - Type : FILE-FLASH
2014-05-15	Adobe Flash Player navigateToUrl hidden channel to file creation RuleID : 30539 - Revision : 2 - Type : FILE-FLASH
2014-05-15	Adobe Flash Player malformed HTML text null dereference attempt RuleID : 30538 - Revision : 3 - Type : FILE-FLASH
2014-05-15	Adobe Flash Player malformed HTML text null dereference attempt RuleID : 30537 - Revision : 3 - Type : FILE-FLASH
2014-05-15	Adobe Flash Player malformed HTML text null dereference attempt RuleID : 30536 - Revision : 2 - Type : FILE-FLASH
2014-05-15	Adobe Flash Player malformed HTML text null dereference attempt RuleID : 30535 - Revision : 3 - Type : FILE-FLASH
2014-04-10	Adobe Flash incorrect null uri character normalization attempt RuleID : 30149 - Revision : 3 - Type : FILE-FLASH
2014-04-10	Adobe Flash incorrect null uri character normalization attempt RuleID : 30148 - Revision : 3 - Type : FILE-FLASH
2014-04-10	Adobe Flash incorrect null uri character normalization attempt RuleID : 30147 - Revision : 3 - Type : FILE-FLASH
2014-04-10	Adobe Flash incorrect null uri character normalization attempt RuleID : 30146 - Revision : 3 - Type : FILE-FLASH
2014-03-29	Adobe Flash Player PCRE regexp out of bounds memory leak ASLR bypass attempt RuleID : 29984 - Revision : 2 - Type : FILE-FLASH
2014-03-29	Adobe Flash Player PCRE regexp out of bounds memory leak ASLR bypass attempt RuleID : 29983 - Revision : 3 - Type : FILE-FLASH
2014-03-27	Adobe Flash regular expression grouping depth buffer overflow attempt RuleID : 29934 - Revision : 4 - Type : FILE-FLASH
2014-03-27	Adobe Flash Player PCRE regexp out of bounds memory leak ASLR bypass attempt RuleID : 29933 - Revision : 4 - Type : FILE-FLASH
2014-03-27	Adobe Flash Player PCRE regexp out of bounds memory leak ASLR bypass attempt RuleID : 29932 - Revision : 3 - Type : FILE-FLASH
2014-03-27	Adobe Flash Player worker shared object use-after-free attempt RuleID : 29931 - Revision : 6 - Type : FILE-FLASH
2014-03-27	Adobe Flash Player worker shared object use-after-free attempt RuleID : 29930 - Revision : 6 - Type : FILE-FLASH
2014-03-27	Adobe Flash Player worker shared object use-after-free attempt RuleID : 29929 - Revision : 7 - Type : FILE-FLASH
2014-03-27	Adobe Flash Player worker shared object use-after-free attempt RuleID : 29928 - Revision : 6 - Type : FILE-FLASH
2014-03-27	Adobe Flash Player buffer overflow attempt RuleID : 29927 - Revision : 2 - Type : FILE-FLASH
2014-03-27	Adobe Flash Player buffer overflow attempt RuleID : 29926 - Revision : 3 - Type : FILE-FLASH
2014-01-10	Adobe Flash regular expression grouping depth buffer overflow attempt RuleID : 19685 - Revision : 13 - Type : FILE-FLASH

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-322.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-307.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-212.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : openSUSE-2014-157.nasl - Type : ACT_GATHER_INFO
2014-05-05	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201405-04.nasl - Type : ACT_GATHER_INFO
2014-05-03	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_flash-player-140429.nasl - Type : ACT_GATHER_INFO
2014-04-30	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2014-0447.nasl - Type : ACT_GATHER_INFO
2014-04-28	Name : The remote host has an ActiveX control installed that is affected by a buffer... File : smb_kb2961887.nasl - Type : ACT_GATHER_INFO
2014-04-28	Name : The remote Mac OS X host has a browser plugin that is affected by a buffer ov... File : macosx_flash_player_13_0_0_206.nasl - Type : ACT_GATHER_INFO
2014-04-28	Name : The remote Windows host has a browser plugin that is affected by a buffer ove... File : flash_player_apsb14-13.nasl - Type : ACT_GATHER_INFO
2014-04-25	Name : The remote Mac OS X host contains a web browser that is affected by multiple ... File : macosx_google_chrome_34_0_1847_131.nasl - Type : ACT_GATHER_INFO
2014-04-25	Name : The remote host contains a web browser that is affected by multiple vulnerabi... File : google_chrome_34_0_1847_131.nasl - Type : ACT_GATHER_INFO
2014-04-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_flash-player-140411.nasl - Type : ACT_GATHER_INFO
2014-04-10	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2014-0380.nasl - Type : ACT_GATHER_INFO
2014-04-09	Name : The remote Mac OS X host contains a version of Adobe AIR that is affected by ... File : macosx_adobe_air_13_0_0_83.nasl - Type : ACT_GATHER_INFO
2014-04-09	Name : The remote Mac OS X host has a browser plugin that is affected by multiple vu... File : macosx_flash_player_13_0_0_182.nasl - Type : ACT_GATHER_INFO
2014-04-09	Name : The remote Windows host has a browser plugin that is affected by multiple vul... File : flash_player_apsb14-09.nasl - Type : ACT_GATHER_INFO
2014-04-09	Name : The remote Windows host contains a version of Adobe AIR that is affected by m... File : adobe_air_apsb14-09.nasl - Type : ACT_GATHER_INFO
2014-04-08	Name : The remote host has an ActiveX control installed that is affected by multiple... File : smb_kb2942844.nasl - Type : ACT_GATHER_INFO
2014-04-08	Name : The remote Mac OS X host contains a web browser that is affected by multiple ... File : macosx_google_chrome_34_0_1847_116.nasl - Type : ACT_GATHER_INFO
2014-04-08	Name : The remote host contains a web browser that is affected by multiple vulnerabi... File : google_chrome_34_0_1847_116.nasl - Type : ACT_GATHER_INFO
2014-03-18	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_flash-player-140313.nasl - Type : ACT_GATHER_INFO
2014-03-13	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2014-0289.nasl - Type : ACT_GATHER_INFO
2014-03-11	Name : The remote host has an ActiveX control installed that is affected by multiple... File : smb_kb2938527.nasl - Type : ACT_GATHER_INFO
2014-03-11	Name : The remote Mac OS X host has a browser plugin that is affected by multiple vu... File : macosx_flash_player_12_0_0_77.nasl - Type : ACT_GATHER_INFO
2014-03-11	Name : The remote Windows host has a browser plugin that is affected by multiple vul... File : flash_player_apsb14-08.nasl - Type : ACT_GATHER_INFO
2014-02-26	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_flash-player-140224.nasl - Type : ACT_GATHER_INFO
2014-02-23	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2014-0196.nasl - Type : ACT_GATHER_INFO
2014-02-20	Name : The remote Windows host has a browser plugin that is affected by multiple vul... File : flash_player_apsb14-07.nasl - Type : ACT_GATHER_INFO
2014-02-20	Name : The remote host has an ActiveX control installed that is affected by multiple... File : smb_kb2934802.nasl - Type : ACT_GATHER_INFO
2014-02-20	Name : The remote Mac OS X host has a browser plugin that is affected by multiple vu... File : macosx_flash_player_12_0_0_70.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-05-06 13:25:50	Multiple Updates
2014-05-03 21:20:06	First insertion

Global Informations

Type	Count
CWE ID(s)	10
Oval ID(s)	23
CPE ID(s)	393
Saint Exploit(s)	1
ExploitDB Exploit(s)	1
IAVM(s)	4
Snort® Rule(s)	49
Nessus® Exploit(s)	31

	Related
10	CVE-2014-0515
10	CVE-2014-0506
10	CVE-2014-0498
9.3	CVE-2014-0507
8.8	CVE-2014-0502
7.8	CVE-2014-0499
6.4	CVE-2014-0503
5	CVE-2014-0508
5	CVE-2014-0504
4.3	CVE-2014-0509
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 10 more Alert(s)