9.3 - HPSBMA02547 SSRT100179

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Execution of Arbitrary Code and Other Vulnerabilities

Informations
Name	HPSBMA02547 SSRT100179	First vendor Publication	2010-07-12
Vendor	HP	Last vendor Modification	2010-07-12
Severity (Vendor)	N/A	Revision	1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Potential security vulnerabilities have been identified in HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows. The vulnerabilities could be exploited remotely to execute arbitrary code and other exploits.

Original Source

Url : http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02273751

CWE : Common Weakness Enumeration

%	Id	Name
62 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
9 %	CWE-399	Resource Management Errors
9 %	CWE-189	Numeric Errors (CWE/SANS Top 25)
9 %	CWE-94	Failure to Control Generation of Code ('Code Injection')
3 %	CWE-787	Out-of-bounds Write (CWE/SANS Top 25)
3 %	CWE-295	Certificate Issues
3 %	CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10057

Oval ID:	oval:org.mitre.oval:def:10057
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0092	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:10088

Oval ID:	oval:org.mitre.oval:def:10088
Title:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section openssl-perl is earlier than 0:0.9.7a-33.26 AND openssl-devel is earlier than 0:0.9.7a-33.26 AND openssl is earlier than 0:0.9.7a-33.26 AND httpd-devel is earlier than 0:2.0.46-77.ent AND mod_ssl is earlier than 0:2.0.46-77.ent AND httpd is earlier than 0:2.0.46-77.ent OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section openssl-perl is earlier than 0:0.9.7a-43.17.el4_8.5 AND httpd-suexec is earlier than 0:2.0.52-41.ent.6 AND httpd-manual is earlier than 0:2.0.52-41.ent.6 AND nspr is earlier than 0:4.8.4-1.1.el4_8 AND mod_ssl is earlier than 0:2.0.52-41.ent.6 AND nss is earlier than 0:3.12.6-1.el4_8 AND nspr-devel is earlier than 0:4.8.4-1.1.el4_8 AND httpd is earlier than 0:2.0.52-41.ent.6 AND openssl-devel is earlier than 0:0.9.7a-43.17.el4_8.5 AND gnutls is earlier than 0:1.0.20-4.el4_8.7 AND openssl is earlier than 0:0.9.7a-43.17.el4_8.5 AND httpd-devel is earlier than 0:2.0.52-41.ent.6 AND nss-devel is earlier than 0:3.12.6-1.el4_8 AND gnutls-devel is earlier than 0:1.0.20-4.el4_8.7 AND nss-tools is earlier than 0:3.12.6-1.el4_8 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section openssl097a is earlier than 0:0.9.7a-9.el5_4.2 AND openssl-perl is earlier than 0:0.9.8e-12.el5_4.6 AND nss-pkcs11-devel is earlier than 0:3.12.6-1.el5_4 AND httpd-manual is earlier than 0:2.2.3-31.el5_4.2 AND nspr-devel is earlier than 0:4.8.4-1.el5_4 AND gnutls is earlier than 0:1.4.1-3.el5_4.8 AND openssl is earlier than 0:0.9.8e-12.el5_4.6 AND httpd-devel is earlier than 0:2.2.3-31.el5_4.2 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND mod_ssl is earlier than 0:2.2.3-31.el5_4.2 AND nspr is earlier than 0:4.8.4-1.el5_4 AND nss is earlier than 0:3.12.6-1.el5_4 AND httpd is earlier than 0:2.2.3-31.el5_4.2 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.6 AND gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND nss-devel is earlier than 0:3.12.6-1.el5_4 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND nss-tools is earlier than 0:3.12.6-1.el5_4 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:10392

Oval ID:	oval:org.mitre.oval:def:10392
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows arbitrary code execution via a crafted image.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows arbitrary code execution via a crafted image.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0847	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:10474

Oval ID:	oval:org.mitre.oval:def:10474
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0085	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:10482

Oval ID:	oval:org.mitre.oval:def:10482
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0838	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:10680

Oval ID:	oval:org.mitre.oval:def:10680
Title:	Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0837	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:10851

Oval ID:	oval:org.mitre.oval:def:10851
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0094	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:11120

Oval ID:	oval:org.mitre.oval:def:11120
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0084	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:11173

Oval ID:	oval:org.mitre.oval:def:11173
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0088	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:11576

Oval ID:	oval:org.mitre.oval:def:11576
Title:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0082	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:11578

Oval ID:	oval:org.mitre.oval:def:11578
Title:	Security Vulnerability in the Transport Layer Security (TLS) and Secure Sockets Layer 3.0 (SSLv3) Protocols Involving Handshake Renegotiation Affects OpenSSL
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	3
Platform(s):	Sun Solaris 10	Product(s):
Definition Synopsis:
Solaris 10 (SPARC) meets Sun Alert 1021653.1 Solaris 10 (SPARC) is installed AND NOT Patch 143140-04 or later installed OR Solaris 10 (SPARC) meets Sun Alert 1021653.1 Solaris 10 (SPARC) is installed AND NOT Patch 145102-01 or later installed OR Solaris 10 (x86) meets Sun Alert 1021653.1 Solaris 10 (x86) is installed AND NOT Patch 141525-10 or later installed

Definition Id: oval:org.mitre.oval:def:11617

Oval ID:	oval:org.mitre.oval:def:11617
Title:	AIX OpenSSL session renegotiation vulnerability
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	3
Platform(s):	IBM AIX 5.2 IBM AIX 5.3 IBM AIX 6.1	Product(s):
Definition Synopsis:
OS check IBM AIX 5.3 is installed AND openssl.base versions less than 0.9.8.1102 OR OS based check IBM AIX 5.3 is installed AND openssl.base FIPS capable versions less than 12.9.8.1102 OR OS check openssl.base versions less than 0.9.8.1102 AND IBM AIX Version 6.1 check AND IBM AIX Version 6.1 check OR openssl.base FIPS capable versions less than 12.9.8.1102 AND IBM AIX Version 6.1 check AND IBM AIX Version 6.1 check OR IBM AIX 5.2 is installed AND openssl.base versions less than 0.9.8.805

Definition Id: oval:org.mitre.oval:def:11621

Oval ID:	oval:org.mitre.oval:def:11621
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0095	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:13085

Oval ID:	oval:org.mitre.oval:def:13085
Title:	USN-927-1 -- nss vulnerability
Description:	Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds support for the new new renegotiation extension and will use it when the server supports it.
Family:	unix	Class:	patch
Reference(s):	USN-927-1 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 9.10	Product(s):	nss
Definition Synopsis:
Ubuntu 9.10 is installed Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc Packages section libnss3-dev DPKG is earlier than 3.12.6-0ubuntu0.9.10.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.6-0ubuntu0.9.10.1 AND libnss3-0d DPKG is earlier than 3.12.6-0ubuntu0.9.10.1 AND libnss3-1d DPKG is earlier than 3.12.6-0ubuntu0.9.10.1 AND libnss3-tools DPKG is earlier than 3.12.6-0ubuntu0.9.10.1

Definition Id: oval:org.mitre.oval:def:13150

Oval ID:	oval:org.mitre.oval:def:13150
Title:	USN-923-1 -- openjdk-6 vulnerabilities
Description:	Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. It was discovered that Loader-constraint table, Policy/PolicyFile, Inflater/Deflater, drag/drop access, and deserialization did not correctly handle certain sensitive objects. If a user were tricked into running a specially crafted applet, private information could be leaked to a remote attacker, leading to a loss of privacy. It was discovered that AtomicReferenceArray, System.arraycopy, InetAddress, and HashAttributeSet did not correctly handle certain situations. If a remote attacker could trigger specific error conditions, a Java application could crash, leading to a denial of service. It was discovered that Pack200, CMM readMabCurveData, ImagingLib, and the AWT library did not correctly check buffer lengths. If a user or automated system were tricked into handling specially crafted JAR files or images, a remote attacker could crash the Java application or possibly gain user privileges . It was discovered that applets did not correctly handle certain trust chains. If a user were tricked into running a specially crafted applet, a remote attacker could possibly run untrusted code with user privileges
Family:	unix	Class:	patch
Reference(s):	USN-923-1 CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0088 CVE-2010-0091 CVE-2010-0094 CVE-2010-0092 CVE-2010-0093 CVE-2010-0095 CVE-2010-0845 CVE-2010-0837 CVE-2010-0838 CVE-2010-0847 CVE-2010-0848 CVE-2010-0840	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 8.10 Ubuntu 9.10 Ubuntu 9.04	Product(s):	openjdk-6
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b11-2ubuntu2.2 AND openjdk-6-doc DPKG is earlier than 6b11-2ubuntu2.2 AND openjdk-6-source DPKG is earlier than 6b11-2ubuntu2.2 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section openjdk-6-jre-headless DPKG is earlier than 6b11-2ubuntu2.2 AND openjdk-6-demo DPKG is earlier than 6b11-2ubuntu2.2 AND openjdk-6-dbg DPKG is earlier than 6b11-2ubuntu2.2 AND openjdk-6-jdk DPKG is earlier than 6b11-2ubuntu2.2 AND openjdk-6-jre DPKG is earlier than 6b11-2ubuntu2.2 OR Release section Ubuntu 8.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-doc DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-source-files DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-source DPKG is earlier than 6b12-0ubuntu6.7 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section openjdk-6-jre DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-jre-headless DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-demo DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-dbg DPKG is earlier than 6b12-0ubuntu6.7 AND openjdk-6-jdk DPKG is earlier than 6b12-0ubuntu6.7 AND icedtea6-plugin DPKG is earlier than 6b12-0ubuntu6.7 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-doc DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-source DPKG is earlier than 6b16-1.6.1-3ubuntu3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section openjdk-6-jre DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-jre-headless DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-demo DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-dbg DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-jdk DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND icedtea6-plugin DPKG is earlier than 6b16-1.6.1-3ubuntu3 OR Architecture depended section Supported architectures section Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc AND Packages section icedtea-6-jre-cacao DPKG is earlier than 6b16-1.6.1-3ubuntu3 AND openjdk-6-jre-zero DPKG is earlier than 6b16-1.6.1-3ubuntu3 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section openjdk-6-jre-lib DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-doc DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-source-files DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-source DPKG is earlier than 6b14-1.4.1-0ubuntu13 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section icedtea-6-jre-cacao DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-jre DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-jre-headless DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-demo DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-dbg DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND openjdk-6-jdk DPKG is earlier than 6b14-1.4.1-0ubuntu13 AND icedtea6-plugin DPKG is earlier than 6b14-1.4.1-0ubuntu13 OR Architecture depended section Supported architectures section Installed architecture is lpia AND Installed architecture is amd64 AND Installed architecture is i386 AND openjdk-6-jre-zero DPKG is earlier than 6b14-1.4.1-0ubuntu13

Definition Id: oval:org.mitre.oval:def:13357

Oval ID:	oval:org.mitre.oval:def:13357
Title:	Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0839	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:13424

Oval ID:	oval:org.mitre.oval:def:13424
Title:	USN-990-1 -- openssl vulnerability
Description:	Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds backported support for the new RFC5746 renegotiation extension and will use it when both the client and the server support it. ATTENTION: After applying this update, a patched server will allow both patched and unpatched clients to connect, but unpatched clients will not be able to renegotiate
Family:	unix	Class:	patch
Reference(s):	USN-990-1 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	openssl
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-4ubuntu3.10 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-4ubuntu3.10 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-4ubuntu3.10 AND libssl0.9.8 DPKG is earlier than 0.9.8g-4ubuntu3.10 AND libssl-dev DPKG is earlier than 0.9.8g-4ubuntu3.10 AND openssl DPKG is earlier than 0.9.8g-4ubuntu3.10 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8k-7ubuntu8.1 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libssl-dev DPKG is earlier than 0.9.8k-7ubuntu8.1 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8k-7ubuntu8.1 AND openssl DPKG is earlier than 0.9.8k-7ubuntu8.1 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8k-7ubuntu8.1 AND libssl0.9.8 DPKG is earlier than 0.9.8k-7ubuntu8.1 AND libssl0.9.8-udeb DPKG is earlier than 0.9.8k-7ubuntu8.1 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-16ubuntu3.2 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-16ubuntu3.2 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-16ubuntu3.2 AND libssl0.9.8 DPKG is earlier than 0.9.8g-16ubuntu3.2 AND libssl-dev DPKG is earlier than 0.9.8g-16ubuntu3.2 AND openssl DPKG is earlier than 0.9.8g-16ubuntu3.2 OR Release section Ubuntu 6.06 is installed AND Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc AND Packages section libssl0.9.8 DPKG is earlier than 0.9.8a-7ubuntu0.12 AND libcrypto0.9.8-udeb DPKG is earlier than 0.9.8a-7ubuntu0.12 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8a-7ubuntu0.12 AND openssl DPKG is earlier than 0.9.8a-7ubuntu0.12 AND libssl-dev DPKG is earlier than 0.9.8a-7ubuntu0.12 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND openssl-doc DPKG is earlier than 0.9.8g-15ubuntu3.5 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section libcrypto0.9.8-udeb DPKG is earlier than 0.9.8g-15ubuntu3.5 AND libssl0.9.8-dbg DPKG is earlier than 0.9.8g-15ubuntu3.5 AND libssl0.9.8 DPKG is earlier than 0.9.8g-15ubuntu3.5 AND libssl-dev DPKG is earlier than 0.9.8g-15ubuntu3.5 AND openssl DPKG is earlier than 0.9.8g-15ubuntu3.5

Definition Id: oval:org.mitre.oval:def:13440

Oval ID:	oval:org.mitre.oval:def:13440
Title:	USN-927-4 -- nss vulnerability
Description:	USN-927-1 fixed vulnerabilities in nss in Ubuntu 9.10. This update provides the corresponding updates for Ubuntu 8.04 LTS. Original advisory details: Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds support for the new new renegotiation extension and will use it when the server supports it.
Family:	unix	Class:	patch
Reference(s):	USN-927-4 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 8.04	Product(s):	nss
Definition Synopsis:
Ubuntu 8.04 is installed Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc Packages section libnss3-dev DPKG is earlier than 3.12.6-0ubuntu0.8.04.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.6-0ubuntu0.8.04.1 AND libnss3-0d DPKG is earlier than 3.12.6-0ubuntu0.8.04.1 AND libnss3-1d DPKG is earlier than 3.12.6-0ubuntu0.8.04.1 AND libnss3-tools DPKG is earlier than 3.12.6-0ubuntu0.8.04.1

Definition Id: oval:org.mitre.oval:def:13492

Oval ID:	oval:org.mitre.oval:def:13492
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0091	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:13529

Oval ID:	oval:org.mitre.oval:def:13529
Title:	USN-990-2 -- apache2 vulnerability
Description:	USN-860-1 introduced a partial workaround to Apache that disabled client initiated TLS renegotiation in order to mitigate CVE-2009-3555. USN-990-1 introduced the new RFC5746 renegotiation extension in openssl, and completely resolves the issue. After updating openssl, an Apache server will allow both patched and unpatched web browsers to connect, but unpatched browsers will not be able to renegotiate. This update introduces the new SSLInsecureRenegotiation directive for Apache that may be used to re-enable insecure renegotiations with unpatched web browsers. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds backported support for the new RFC5746 renegotiation extension and will use it when both the client and the server support it.
Family:	unix	Class:	patch
Reference(s):	USN-990-2 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.10 Ubuntu 6.06 Ubuntu 9.04	Product(s):	apache2
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section apache2-mpm-perchild DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-doc DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-src DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2 DPKG is earlier than 2.2.8-1ubuntu0.18 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2-utils DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-mpm-worker DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2.2-common DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-mpm-prefork DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-threaded-dev DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-mpm-event DPKG is earlier than 2.2.8-1ubuntu0.18 AND apache2-prefork-dev DPKG is earlier than 2.2.8-1ubuntu0.18 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND apache2-doc DPKG is earlier than 2.2.14-5ubuntu8.2 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section apache2.2-bin DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-utils DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-worker DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2.2-common DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-suexec-custom DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-suexec DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2 DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-prefork DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-threaded-dev DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-event DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-mpm-itk DPKG is earlier than 2.2.14-5ubuntu8.2 AND apache2-prefork-dev DPKG is earlier than 2.2.14-5ubuntu8.2 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-prefork DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-itk DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-worker DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-mpm-event DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2.2-common DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2 DPKG is earlier than 2.2.12-1ubuntu2.3 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2.2-bin DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-utils DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-suexec-custom DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-suexec DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-threaded-dev DPKG is earlier than 2.2.12-1ubuntu2.3 AND apache2-prefork-dev DPKG is earlier than 2.2.12-1ubuntu2.3 OR Release section Ubuntu 6.06 is installed AND Architecture section Architecture independet section Installed architecture is all AND apache2-doc DPKG is earlier than 2.0.55-4ubuntu2.11 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section libapr0 DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-utils DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-mpm-worker DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-mpm-perchild DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-common DPKG is earlier than 2.0.55-4ubuntu2.11 AND libapr0-dev DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2 DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-threaded-dev DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-mpm-prefork DPKG is earlier than 2.0.55-4ubuntu2.11 AND apache2-prefork-dev DPKG is earlier than 2.0.55-4ubuntu2.11 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-src DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2 DPKG is earlier than 2.2.11-2ubuntu2.7 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section apache2-utils DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-mpm-worker DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2.2-common DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-suexec-custom DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-suexec DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-mpm-prefork DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-threaded-dev DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-mpm-event DPKG is earlier than 2.2.11-2ubuntu2.7 AND apache2-prefork-dev DPKG is earlier than 2.2.11-2ubuntu2.7

Definition Id: oval:org.mitre.oval:def:13532

Oval ID:	oval:org.mitre.oval:def:13532
Title:	USN-927-6 -- nss vulnerability
Description:	USN-927-1 fixed vulnerabilities in NSS on Ubuntu 9.10. This update provides the corresponding updates for Ubuntu 9.04. Original advisory details: Marsh Ray and Steve Dispensa discovered a flaw in the TLS and SSLv3 protocols. If an attacker could perform a man in the middle attack at the start of a TLS connection, the attacker could inject arbitrary content at the beginning of the user�s session. This update adds support for the new new renegotiation extension and will use it when the server supports it.
Family:	unix	Class:	patch
Reference(s):	USN-927-6 CVE-2009-3555	Version:	5
Platform(s):	Ubuntu 9.04	Product(s):	nss
Definition Synopsis:
Ubuntu 9.04 is installed Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is powerpc Packages section libnss3-dev DPKG is earlier than 3.12.6-0ubuntu0.9.04.1 AND libnss3-1d-dbg DPKG is earlier than 3.12.6-0ubuntu0.9.04.1 AND libnss3-0d DPKG is earlier than 3.12.6-0ubuntu0.9.04.1 AND libnss3-1d DPKG is earlier than 3.12.6-0ubuntu0.9.04.1 AND libnss3-tools DPKG is earlier than 3.12.6-0ubuntu0.9.04.1

Definition Id: oval:org.mitre.oval:def:13623

Oval ID:	oval:org.mitre.oval:def:13623
Title:	DSA-1934-1 apache2 -- multiple issues
Description:	A design flaw has been found in the TLS and SSL protocol that allows an attacker to inject arbitrary content at the beginning of a TLS/SSL connection. The attack is related to the way how TLS and SSL handle session renegotiations. CVE-2009-3555 has been assigned to this vulnerability. As a partial mitigation against this attack, this apache2 update disables client-initiated renegotiations. This should fix the vulnerability for the majority of Apache configurations in use. NOTE: This is not a complete fix for the problem. The attack is still possible in configurations where the server initiates the renegotiation. This is the case for the following configurations: - - The "SSLVerifyClient" directive is used in a Directory or Location context. - - The "SSLCipherSuite" directive is used in a Directory or Location context. As a workaround, you may rearrange your configuration in a way that SSLVerifyClient and SSLCipherSuite are only used on the server or virtual host level. A complete fix for the problem will require a protocol change. Further information will be included in a separate announcement about this issue. In addition, this update fixes the following issues in Apache's mod_proxy_ftp: CVE-2009-3094: Insufficient input validation in the mod_proxy_ftp module allowed remote FTP servers to cause a denial of service via a malformed reply to an EPSV command. CVE-2009-3095: Insufficient input validation in the mod_proxy_ftp module allowed remote authenticated attackers to bypass intended access restrictions and send arbitrary FTP commands to an FTP server. For the stable distribution, these problems have been fixed in version 2.2.9-10+lenny6. This version also includes some non-security bug fixes that were scheduled for inclusion in the next stable point release. The oldstable distribution, these problems have been fixed in version 2.2.3-4+etch11. For the testing distribution and the unstable distribution, these problems will be fixed in version 2.2.14-2. This advisory also provides updated apache2-mpm-itk packages which have been recompiled against the new apache2 packages. Updated apache2-mpm-itk packages for the armel architecture are not included yet. They will be released as soon as they become available. We recommend that you upgrade your apache2 and apache2-mpm-itk packages.
Family:	unix	Class:	patch
Reference(s):	DSA-1934-1 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555	Version:	5
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	apache2
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-doc DPKG is earlier than 2.2.9-10+lenny6 AND apache2-src DPKG is earlier than 2.2.9-10+lenny6 AND apache2 DPKG is earlier than 2.2.9-10+lenny6 OR Architecture depended section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section apache2-threaded-dev DPKG is earlier than 2.2.9-10+lenny6 AND apache2-utils DPKG is earlier than 2.2.9-10+lenny6 AND apache2-mpm-worker DPKG is earlier than 2.2.9-10+lenny6 AND apache2.2-common DPKG is earlier than 2.2.9-10+lenny6 AND apache2-suexec-custom DPKG is earlier than 2.2.9-10+lenny6 AND apache2-suexec DPKG is earlier than 2.2.9-10+lenny6 AND apache2-mpm-prefork DPKG is earlier than 2.2.9-10+lenny6 AND apache2-dbg DPKG is earlier than 2.2.9-10+lenny6 AND apache2-mpm-event DPKG is earlier than 2.2.9-10+lenny6 AND apache2-prefork-dev DPKG is earlier than 2.2.9-10+lenny6 AND apache2-mpm-itk DPKG is earlier than 2.2.6-02-1+lenny2+b2 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-mpm-perchild DPKG is earlier than 2.2.3-4+etch11 AND apache2-doc DPKG is earlier than 2.2.3-4+etch11 AND apache2-src DPKG is earlier than 2.2.3-4+etch11 AND apache2 DPKG is earlier than 2.2.3-4+etch11 AND apache2-utils DPKG is earlier than 2.2.3-4+etch11 AND apache2-mpm-worker DPKG is earlier than 2.2.3-4+etch11 AND apache2.2-common DPKG is earlier than 2.2.3-4+etch11 AND apache2-mpm-prefork DPKG is earlier than 2.2.3-4+etch11 AND apache2-threaded-dev DPKG is earlier than 2.2.3-4+etch11 AND apache2-mpm-event DPKG is earlier than 2.2.3-4+etch11 AND apache2-mpm-itk DPKG is earlier than 2.2.3-01-2+etch4+b1 AND apache2-prefork-dev DPKG is earlier than 2.2.3-4+etch11

Definition Id: oval:org.mitre.oval:def:13795

Oval ID:	oval:org.mitre.oval:def:13795
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0849	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:13803

Oval ID:	oval:org.mitre.oval:def:13803
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0085	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:13923

Oval ID:	oval:org.mitre.oval:def:13923
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0838	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed

Definition Id: oval:org.mitre.oval:def:13934

Oval ID:	oval:org.mitre.oval:def:13934
Title:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0082	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:13959

Oval ID:	oval:org.mitre.oval:def:13959
Title:	Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0087	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:13971

Oval ID:	oval:org.mitre.oval:def:13971
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0840	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14061

Oval ID:	oval:org.mitre.oval:def:14061
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0084	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14072

Oval ID:	oval:org.mitre.oval:def:14072
Title:	DEPRECATED: Adobe Flash Player 9 before 9.0.277.0 on unspecified UNIX platforms allows attackers to cause a denial of service via unknown vectors.
Description:	Adobe Flash Player 9 before 9.0.277.0 on unspecified UNIX platforms allows attackers to cause a denial of service via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2172	Version:	9
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000	Product(s):	Adobe Flash Player
Definition Synopsis:
Determine if the version of Adobe Flash Player is less than or equal to 9.0.262.0 and is greater than or equal to 9.0.16 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal to 9.0.262.0 AND Determine if the version of Adobe Flash Player is greater than or equal to 9.0.16

Definition Id: oval:org.mitre.oval:def:14092

Oval ID:	oval:org.mitre.oval:def:14092
Title:	Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute arbitrary code.
Description:	Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to XNewPtr and improper handling of an integer parameter when allocating heap memory in the com.sun.media.sound libraries, which allows remote attackers to execute arbitrary code.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0843	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0:update_18 Java SE Runtime Environment 6 is installed AND Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Determine if the version of Java Runtime Environment is greater than or equal to 1.6.0:update_18 OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0:update23 Java SE Development Kit 5 is installed AND Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Determine if the version of Java Development Kit is greater than or equal to 1.5.0:update23 OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0:update_18 Java SE Development Kit 6 is installed AND Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Determine if the version of Java Development Kit is greater than or equal to 1.6.0:update_18 OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0:update23 Java SE Runtime Environment 5 is installed AND Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Determine if the version of Java Runtime Environment is greater than or equal to 1.5.0:update23

Definition Id: oval:org.mitre.oval:def:14101

Oval ID:	oval:org.mitre.oval:def:14101
Title:	Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
Description:	Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an uncontrolled array index that allows remote attackers to execute arbitrary code via a MIDI file with a crafted MixerSequencer object, related to the GM_Song structure.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0842	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14105

Oval ID:	oval:org.mitre.oval:def:14105
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0095	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14144

Oval ID:	oval:org.mitre.oval:def:14144
Title:	Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values, related to JPEGImageReader and "stepX".
Description:	Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the Java Runtime Environment that allows remote attackers to execute arbitrary code via a JPEG image that contains subsample dimensions with large values, related to JPEGImageReader and "stepX".
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0841	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14208

Oval ID:	oval:org.mitre.oval:def:14208
Title:	Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0089	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14210

Oval ID:	oval:org.mitre.oval:def:14210
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0092	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed

Definition Id: oval:org.mitre.oval:def:14237

Oval ID:	oval:org.mitre.oval:def:14237
Title:	Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote attackers to affect integrity and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote attackers to affect integrity and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0090	Version:	7
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed

Definition Id: oval:org.mitre.oval:def:14276

Oval ID:	oval:org.mitre.oval:def:14276
Title:	Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0837	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed

Definition Id: oval:org.mitre.oval:def:14282

Oval ID:	oval:org.mitre.oval:def:14282
Title:	Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to arbitrary memory.
Description:	Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is for improper parsing of a crafted MIDI stream when creating a MixerSequencer object, which causes a pointer to be corrupted and allows a NULL byte to be written to arbitrary memory.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0844	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14288

Oval ID:	oval:org.mitre.oval:def:14288
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0093	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14321

Oval ID:	oval:org.mitre.oval:def:14321
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0088	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14350

Oval ID:	oval:org.mitre.oval:def:14350
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0848	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14351

Oval ID:	oval:org.mitre.oval:def:14351
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0094	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed

Definition Id: oval:org.mitre.oval:def:14453

Oval ID:	oval:org.mitre.oval:def:14453
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows arbitrary code execution via a crafted image.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows arbitrary code execution via a crafted image.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0847	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14503

Oval ID:	oval:org.mitre.oval:def:14503
Title:	Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image encoder (JPEGImageEncoderImpl).
Description:	Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow that allows remote attackers to execute arbitrary code, related to an "invalid assignment" and inconsistent length values in a JPEG image encoder (JPEGImageEncoderImpl).
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0846	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Runtime Environment Java Development Kit
Definition Synopsis:
Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed OR Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed

Definition Id: oval:org.mitre.oval:def:14521

Oval ID:	oval:org.mitre.oval:def:14521
Title:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0845	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012	Product(s):	Java Development Kit Java Runtime Environment
Definition Synopsis:
Determine if the version of Java Development Kit is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Development Kit is less than 1.5.0:update24 AND Java SE Development Kit 5 is installed OR Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Runtime Environment is less than 1.6.0:update_19 AND Java SE Runtime Environment 6 is installed OR Determine if the version of Java Development Kit is less than 1.6.0:update_19 and is greater than or equal to 1.6.0 Determine if the version of Java Development Kit is less than 1.6.0:update_19 AND Java SE Development Kit 6 is installed OR Determine if the version of Java Runtime Environment is less than 1.5.0:update24 and is greater than or equal to 1.5.0 Determine if the version of Java Runtime Environment is less than 1.5.0:update24 AND Java SE Runtime Environment 5 is installed

Definition Id: oval:org.mitre.oval:def:15360

Oval ID:	oval:org.mitre.oval:def:15360
Title:	Adobe Flash Player Invalid Pointer Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newfunction (0x44) operator, a different vulnerability than CVE-2010-2173.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2174	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:15437

Oval ID:	oval:org.mitre.oval:def:15437
Title:	Adobe Flash Player Multiple Heap Overflow Vulnerabilities
Description:	Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed (1) GIF or (2) JPEG data.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2167	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:15525

Oval ID:	oval:org.mitre.oval:def:15525
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2175	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:15541

Oval ID:	oval:org.mitre.oval:def:15541
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2166	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:15576

Oval ID:	oval:org.mitre.oval:def:15576
Title:	Adobe Flash Player Out Of Bounds Memory Indexing Vulnerability
Description:	Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified "types of Adobe Flash code."
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2161	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:15719

Oval ID:	oval:org.mitre.oval:def:15719
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2176	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:15798

Oval ID:	oval:org.mitre.oval:def:15798
Title:	Adobe Flash Player Use-After-Free Vulnerability
Description:	Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unspecified "image type within a certain function."
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2164	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:15920

Oval ID:	oval:org.mitre.oval:def:15920
Title:	Adobe Flash Player Integer Overflow Vulnerability
Description:	Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2181.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2183	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:15937

Oval ID:	oval:org.mitre.oval:def:15937
Title:	Adobe Flash Player Integer Overflow Vulnerability
Description:	Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2183.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2181	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:15965

Oval ID:	oval:org.mitre.oval:def:15965
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2177	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16022

Oval ID:	oval:org.mitre.oval:def:16022
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2178	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16029

Oval ID:	oval:org.mitre.oval:def:16029
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2187, and CVE-2010-2188.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2184	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16052

Oval ID:	oval:org.mitre.oval:def:16052
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2180	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16056

Oval ID:	oval:org.mitre.oval:def:16056
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, and CVE-2010-2188.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2187	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16083

Oval ID:	oval:org.mitre.oval:def:16083
Title:	Adobe Flash Player Memory Exhaustion Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an invalid offset in an unspecified undocumented opcode in ActionScript Virtual Machine 2, related to getouterscope, a different vulnerability than CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2160	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16090

Oval ID:	oval:org.mitre.oval:def:16090
Title:	Adobe Flash Player Buffer Overflow Vulnerability
Description:	Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2185	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16223

Oval ID:	oval:org.mitre.oval:def:16223
Title:	Adobe Flash Player Memory Exhaustion Vulnerability
Description:	Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or possibly execute arbitrary code via unknown vectors.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2009-3793	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16225

Oval ID:	oval:org.mitre.oval:def:16225
Title:	Adobe Flash Player Pointer Memory Corruption
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allow attackers to cause a denial of service (pointer memory corruption) or possibly execute arbitrary code via unspecified vectors.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2169	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16261

Oval ID:	oval:org.mitre.oval:def:16261
Title:	Adobe Flash Player Invalid Pointer Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newclass (0x58) operator, a different vulnerability than CVE-2010-2174.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2173	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16271

Oval ID:	oval:org.mitre.oval:def:16271
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by calling the ActionScript native object 2200 connect method multiple times with different arguments, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, and CVE-2010-2187.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2188	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16283

Oval ID:	oval:org.mitre.oval:def:16283
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2182	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16285

Oval ID:	oval:org.mitre.oval:def:16285
Title:	Adobe Flash Player Denial of Service Vulnerability
Description:	Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2186	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16302

Oval ID:	oval:org.mitre.oval:def:16302
Title:	Adobe Flash Player SWF Version Null Pointer Dereference Denial of Service Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two responses that provide SWF files with different SWF version numbers.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2008-4546	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16316

Oval ID:	oval:org.mitre.oval:def:16316
Title:	Adobe Flash Player Multiple Vulnerabilities that could lead to code execution
Description:	Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unknown vectors.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2163	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16341

Oval ID:	oval:org.mitre.oval:def:16341
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors related to SWF files, decompression of embedded JPEG image data, and the DefineBits and other unspecified tags, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2171	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16345

Oval ID:	oval:org.mitre.oval:def:16345
Title:	Adobe Flash Player Heap Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors related to improper length calculation and the (1) STSC, (2) STSZ, and (3) STCO atoms.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2162	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16348

Oval ID:	oval:org.mitre.oval:def:16348
Title:	Adobe Flash Player Integer Overflow Vulnerability
Description:	Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2181 and CVE-2010-2183.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2170	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:16350

Oval ID:	oval:org.mitre.oval:def:16350
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2010-2165	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64 installed Adobe Flash Player is Installed AND Flash version is before 9.0.277.0 or 10.x before 10.1.53.64 Version of Adobe Flash Player is less than 9.0.277.0 OR Adobe Flash Player 10.x before 10.1.53.64 installed Adobe Flash Player 10 is Installed AND Version of Adobe Flash Player is less than 10.1.53.64 OR Adobe AIR before 2.0.2.12610 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.0.2.12610

Definition Id: oval:org.mitre.oval:def:20357

Oval ID:	oval:org.mitre.oval:def:20357
Title:	Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	4
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
Patch ESX400-201103403-SG is not installed VMware ESX Server 4.0 is installed AND Patch ESX400-201103403-SG is not installed

Definition Id: oval:org.mitre.oval:def:21255

Oval ID:	oval:org.mitre.oval:def:21255
Title:	RHSA-2010:0155: java-1.4.2-ibm security and bug fix update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0155-01 CVE-2009-3555	Version:	4
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.4.2-ibm is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.4-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:21415

Oval ID:	oval:org.mitre.oval:def:21415
Title:	RHSA-2010:0383: java-1.6.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0383-01 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0090 CVE-2010-0091 CVE-2010-0092 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0839 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849	Version:	289
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.6.0-ibm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm-devel is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.8-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:21587

Oval ID:	oval:org.mitre.oval:def:21587
Title:	RHSA-2010:0165: nss security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0165-01 CESA-2010:0165 CVE-2009-3555	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	nspr nss
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section nspr-devel is earlier than 0:4.8.4-1.el5_4 AND nspr is earlier than 0:4.8.4-1.el5_4 AND nss is earlier than 0:3.12.6-1.el5_4 AND nss-tools is earlier than 0:3.12.6-1.el5_4 AND nss-devel is earlier than 0:3.12.6-1.el5_4 AND nss-pkcs11-devel is earlier than 0:3.12.6-1.el5_4

Definition Id: oval:org.mitre.oval:def:21828

Oval ID:	oval:org.mitre.oval:def:21828
Title:	RHSA-2010:0166: gnutls security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0166-01 CESA-2010:0166 CVE-2009-2409 CVE-2009-3555	Version:	29
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	gnutls
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8 AND gnutls is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:21877

Oval ID:	oval:org.mitre.oval:def:21877
Title:	RHSA-2010:0164: openssl097a security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0164-01 CESA-2010:0164 CVE-2009-3555	Version:	4
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	openssl097a
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x AND openssl097a is earlier than 0:0.9.7a-9.el5_4.2

Definition Id: oval:org.mitre.oval:def:21942

Oval ID:	oval:org.mitre.oval:def:21942
Title:	RHSA-2010:0339: java-1.6.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0339-01 CESA-2010:0339 CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0088 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0840 CVE-2010-0845 CVE-2010-0847 CVE-2010-0848	Version:	198
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:22053

Oval ID:	oval:org.mitre.oval:def:22053
Title:	RHSA-2010:0464: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by calling the ActionScript native object 2200 connect method multiple times with different arguments, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, and CVE-2010-2187.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0464-01 CVE-2008-4546 CVE-2009-3793 CVE-2010-1297 CVE-2010-2160 CVE-2010-2161 CVE-2010-2162 CVE-2010-2163 CVE-2010-2164 CVE-2010-2165 CVE-2010-2166 CVE-2010-2167 CVE-2010-2169 CVE-2010-2170 CVE-2010-2171 CVE-2010-2173 CVE-2010-2174 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2179 CVE-2010-2180 CVE-2010-2181 CVE-2010-2182 CVE-2010-2183 CVE-2010-2184 CVE-2010-2185 CVE-2010-2186 CVE-2010-2187 CVE-2010-2188	Version:	393
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	flash-plugin
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:10.1-2.el5

Definition Id: oval:org.mitre.oval:def:22088

Oval ID:	oval:org.mitre.oval:def:22088
Title:	RHSA-2010:0337: java-1.6.0-sun security update (Critical)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0337-01 CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0090 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0839 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0845 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849	Version:	341
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.6.0-sun
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.6.0-sun-jdbc is earlier than 1:1.6.0.19-1jpp.1.el5 AND java-1.6.0-sun is earlier than 1:1.6.0.19-1jpp.1.el5 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.19-1jpp.1.el5 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.19-1jpp.1.el5 AND java-1.6.0-sun-src is earlier than 1:1.6.0.19-1jpp.1.el5 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.19-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22101

Oval ID:	oval:org.mitre.oval:def:22101
Title:	RHSA-2010:0338: java-1.5.0-sun security update (Critical)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0338-02 CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0839 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0845 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849	Version:	328
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.5.0-sun
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.5.0-sun-uninstall is earlier than 0:1.5.0.22-1jpp.3.el5 AND java-1.5.0-sun is earlier than 0:1.5.0.22-1jpp.3.el5

Definition Id: oval:org.mitre.oval:def:22183

Oval ID:	oval:org.mitre.oval:def:22183
Title:	RHSA-2010:0130: java-1.5.0-ibm security update (Moderate)
Description:	Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0130-01 CVE-2009-3555 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0091 CVE-2010-0092 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0839	Version:	172
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.11.1-1jpp.3.el5

Definition Id: oval:org.mitre.oval:def:22249

Oval ID:	oval:org.mitre.oval:def:22249
Title:	RHSA-2010:0489: java-1.5.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0489-01 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849	Version:	120
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.11.2-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22358

Oval ID:	oval:org.mitre.oval:def:22358
Title:	RHSA-2010:0574: java-1.4.2-ibm security update (Critical)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0574-01 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0091 CVE-2010-0095 CVE-2010-0839 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849	Version:	224
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section java-1.4.2-ibm is earlier than 0:1.4.2.13.5-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.5-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.5-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.5-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.5-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.5-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.5-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22564

Oval ID:	oval:org.mitre.oval:def:22564
Title:	ELSA-2010:0383: java-1.6.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0383-01 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0090 CVE-2010-0091 CVE-2010-0092 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0839 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849	Version:	93
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.6.0-ibm-javacomm is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm-accessibility is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm-devel is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm-src is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm-demo is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm-plugin is earlier than 1:1.6.0.8-1jpp.1.el5 AND java-1.6.0-ibm-jdbc is earlier than 1:1.6.0.8-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22706

Oval ID:	oval:org.mitre.oval:def:22706
Title:	ELSA-2010:0574: java-1.4.2-ibm security update (Critical)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0574-01 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0091 CVE-2010-0095 CVE-2010-0839 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849	Version:	73
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-ibm is earlier than 0:1.4.2.13.5-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.5-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.5-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.5-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.5-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.5-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.5-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22745

Oval ID:	oval:org.mitre.oval:def:22745
Title:	ELSA-2010:0130: java-1.5.0-ibm security update (Moderate)
Description:	Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0130-01 CVE-2009-3555 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0091 CVE-2010-0092 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0839	Version:	57
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.11.1-1jpp.3.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.11.1-1jpp.3.el5

Definition Id: oval:org.mitre.oval:def:22820

Oval ID:	oval:org.mitre.oval:def:22820
Title:	ELSA-2009:1579: httpd security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2009:1579-02 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555	Version:	17
Platform(s):	Oracle Linux 5	Product(s):	httpd
Definition Synopsis:
Oracle Linux 5.x rpm test httpd-manual is earlier than 0:2.2.3-31.el5_4.2 AND httpd-devel is earlier than 0:2.2.3-31.el5_4.2 AND mod_ssl is earlier than 0:2.2.3-31.el5_4.2 AND httpd is earlier than 0:2.2.3-31.el5_4.2

Definition Id: oval:org.mitre.oval:def:22913

Oval ID:	oval:org.mitre.oval:def:22913
Title:	ELSA-2010:0155: java-1.4.2-ibm security and bug fix update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0155-01 CVE-2009-3555	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-ibm is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.13.4-1jpp.1.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.13.4-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22952

Oval ID:	oval:org.mitre.oval:def:22952
Title:	ELSA-2010:0337: java-1.6.0-sun security update (Critical)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0337-01 CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0090 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0839 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0845 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849	Version:	109
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-sun
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.6.0-sun-jdbc is earlier than 1:1.6.0.19-1jpp.1.el5 AND java-1.6.0-sun is earlier than 1:1.6.0.19-1jpp.1.el5 AND java-1.6.0-sun-demo is earlier than 1:1.6.0.19-1jpp.1.el5 AND java-1.6.0-sun-plugin is earlier than 1:1.6.0.19-1jpp.1.el5 AND java-1.6.0-sun-src is earlier than 1:1.6.0.19-1jpp.1.el5 AND java-1.6.0-sun-devel is earlier than 1:1.6.0.19-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:22993

Oval ID:	oval:org.mitre.oval:def:22993
Title:	ELSA-2010:0165: nss security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0165-01 CVE-2009-3555	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	nspr nss
Definition Synopsis:
Oracle Linux 5.x rpm test nspr-devel is earlier than 0:4.8.4-1.el5_4 AND nspr is earlier than 0:4.8.4-1.el5_4 AND nss is earlier than 0:3.12.6-1.el5_4 AND nss-tools is earlier than 0:3.12.6-1.el5_4 AND nss-devel is earlier than 0:3.12.6-1.el5_4 AND nss-pkcs11-devel is earlier than 0:3.12.6-1.el5_4

Definition Id: oval:org.mitre.oval:def:22994

Oval ID:	oval:org.mitre.oval:def:22994
Title:	ELSA-2010:0339: java-1.6.0-openjdk security update (Important)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0339-01 CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0088 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0840 CVE-2010-0845 CVE-2010-0847 CVE-2010-0848	Version:	65
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:22997

Oval ID:	oval:org.mitre.oval:def:22997
Title:	ELSA-2010:0464: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by calling the ActionScript native object 2200 connect method multiple times with different arguments, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, and CVE-2010-2187.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0464-01 CVE-2008-4546 CVE-2009-3793 CVE-2010-1297 CVE-2010-2160 CVE-2010-2161 CVE-2010-2162 CVE-2010-2163 CVE-2010-2164 CVE-2010-2165 CVE-2010-2166 CVE-2010-2167 CVE-2010-2169 CVE-2010-2170 CVE-2010-2171 CVE-2010-2173 CVE-2010-2174 CVE-2010-2175 CVE-2010-2176 CVE-2010-2177 CVE-2010-2178 CVE-2010-2179 CVE-2010-2180 CVE-2010-2181 CVE-2010-2182 CVE-2010-2183 CVE-2010-2184 CVE-2010-2185 CVE-2010-2186 CVE-2010-2187 CVE-2010-2188	Version:	125
Platform(s):	Oracle Linux 5	Product(s):	flash-plugin
Definition Synopsis:
Oracle Linux 5.x AND flash-plugin is earlier than 0:10.1-2.el5

Definition Id: oval:org.mitre.oval:def:23000

Oval ID:	oval:org.mitre.oval:def:23000
Title:	ELSA-2010:0166: gnutls security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0166-01 CVE-2009-2409 CVE-2009-3555	Version:	13
Platform(s):	Oracle Linux 5	Product(s):	gnutls
Definition Synopsis:
Oracle Linux 5.x rpm test gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8 AND gnutls is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:23090

Oval ID:	oval:org.mitre.oval:def:23090
Title:	ELSA-2010:0164: openssl097a security update (Moderate)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0164-01 CVE-2009-3555	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	openssl097a
Definition Synopsis:
Oracle Linux 5.x AND openssl097a is earlier than 0:0.9.7a-9.el5_4.2

Definition Id: oval:org.mitre.oval:def:23097

Oval ID:	oval:org.mitre.oval:def:23097
Title:	ELSA-2010:0338: java-1.5.0-sun security update (Critical)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0338-02 CVE-2009-3555 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0087 CVE-2010-0088 CVE-2010-0089 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0839 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0845 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849	Version:	105
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-sun
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-sun-uninstall is earlier than 0:1.5.0.22-1jpp.3.el5 AND java-1.5.0-sun is earlier than 0:1.5.0.22-1jpp.3.el5

Definition Id: oval:org.mitre.oval:def:23141

Oval ID:	oval:org.mitre.oval:def:23141
Title:	ELSA-2010:0489: java-1.5.0-ibm security update (Critical)
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a heap-based buffer overflow in a decoding routine used by the JPEGImageDecoderImpl interface, which allows code execution via a crafted JPEG image.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0489-01 CVE-2010-0840 CVE-2010-0841 CVE-2010-0842 CVE-2010-0843 CVE-2010-0844 CVE-2010-0846 CVE-2010-0847 CVE-2010-0848 CVE-2010-0849	Version:	41
Platform(s):	Oracle Linux 5	Product(s):	java-1.5.0-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.5.0-ibm-jdbc is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm-accessibility is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm-src is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm-plugin is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm-devel is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm-demo is earlier than 1:1.5.0.11.2-1jpp.1.el5 AND java-1.5.0-ibm-javacomm is earlier than 1:1.5.0.11.2-1jpp.1.el5

Definition Id: oval:org.mitre.oval:def:25097

Oval ID:	oval:org.mitre.oval:def:25097
Title:	Vulnerability in OpenSSL before 0.9.8i, allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	4
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2	Product(s):	OpenSSL
Definition Synopsis:
Check vulnerable OpenSSL Check vulnerable versions of OpenSSL Check if the version of OpenSSL 0.9.1c before 0.9.8i AND OpenSSL is installed OR Check vulnerable OpenSSL (32_bit) Check vulnerable versions of OpenSSL (32_bit) Check if the version of OpenSSL 0.9.1c before 0.9.8i (32_bit) AND OpenSSL (32_bit) is installed AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8i ProgramFilesDir AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8i ProgramFilesDir x86 AND Check if the version of ssleay32.dll 0.9.1c before 0.9.8i under Sytem32 and SysWOW64

Definition Id: oval:org.mitre.oval:def:27295

Oval ID:	oval:org.mitre.oval:def:27295
Title:	DEPRECATED: ELSA-2010-0164 -- openssl097a security update (moderate)
Description:	[0.9.7a-9.2] - CVE-2009-3555 - support the secure renegotiation RFC (#533125)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0164 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	openssl097a
Definition Synopsis:
Oracle Linux 5.x AND openssl097a is earlier than 0:0.9.7a-9.el5_4.2

Definition Id: oval:org.mitre.oval:def:27748

Oval ID:	oval:org.mitre.oval:def:27748
Title:	DEPRECATED: ELSA-2010-0162 -- openssl security update (important)
Description:	[0.9.8e-12.6] - fix CVE-2009-3245 - add missing bn_wexpand return checks (#570924) [0.9.8e-12.5] - fix CVE-2010-0433 - do not pass NULL princ to krb5_kt_get_entry which in the RHEL-5 and newer versions will crash in such case (#569774) [0.9.8e-12.4] - do not disable SSLv2 in the renegotiation patch - SSLv2 does not support renegotiation - allow unsafe renegotiation on clients with SSL_OP_LEGACY_SERVER_CONNECT [0.9.8e-12.3] - mention the RFC5746 in the CVE-2009-3555 doc [0.9.8e-12.2] - fix CVE-2009-3555 - support the safe renegotiation extension and do not allow legacy renegotiation on the server by default (#533125)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0162 CVE-2010-0433 CVE-2009-3245 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	openssl
Definition Synopsis:
Oracle Linux 5.x Packages match section openssl is earlier than 0:0.9.8e-12.el5_4.6 AND openssl-devel is earlier than 0:0.9.8e-12.el5_4.6 AND openssl-perl is earlier than 0:0.9.8e-12.el5_4.6

Definition Id: oval:org.mitre.oval:def:27881

Oval ID:	oval:org.mitre.oval:def:27881
Title:	DEPRECATED: ELSA-2010-0166 -- gnutls security update (moderate)
Description:	[1.4.1-3.8] - fix safe renegotiation on SSL3 protocol [1.4.1-3.7] - implement safe renegotiation - CVE-2009-3555 (#533125) - do not allow MD2 in certificate signatures by default - CVE-2009-2409 (#510197)
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0166 CVE-2009-2409 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	gnutls
Definition Synopsis:
Oracle Linux 5.x Packages match section gnutls is earlier than 0:1.4.1-3.el5_4.8 AND gnutls-devel is earlier than 0:1.4.1-3.el5_4.8 AND gnutls-utils is earlier than 0:1.4.1-3.el5_4.8

Definition Id: oval:org.mitre.oval:def:28188

Oval ID:	oval:org.mitre.oval:def:28188
Title:	DEPRECATED: ELSA-2010-0768 -- java-1.6.0-openjdk security and bug fix update (important)
Description:	[1.6.0.0-1.16.b17.0.1.el5] - Add oracle-enterprise.patch [1.6.0.0-1.16.b17.el5] - Updated 1.7.5 tarball (contains additional security fixes) - Resolves: bz639951 [1.6.0.0-1.15.b17.el5] - Rebuild - Resolves: bz639951 [1.6.0.0-1.14.b17.el5] - Synched with el6 branch - Updated to IcedTea 1.7.5 - Resolves: bz639951 - Also resolves 619800 and 621303
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0768 CVE-2010-3541 CVE-2010-3548 CVE-2010-3549 CVE-2010-3551 CVE-2010-3553 CVE-2010-3554 CVE-2010-3557 CVE-2010-3561 CVE-2010-3562 CVE-2010-3564 CVE-2010-3565 CVE-2010-3567 CVE-2010-3568 CVE-2010-3569 CVE-2010-3573 CVE-2010-3574 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5.x Packages match section java-1.6.0-openjdk is earlier than 0:1.6.0.0-1.16.b17.0.1.el5 AND java-1.6.0-openjdk-demo is earlier than 0:1.6.0.0-1.16.b17.0.1.el5 AND java-1.6.0-openjdk-devel is earlier than 0:1.6.0.0-1.16.b17.0.1.el5 AND java-1.6.0-openjdk-javadoc is earlier than 0:1.6.0.0-1.16.b17.0.1.el5 AND java-1.6.0-openjdk-src is earlier than 0:1.6.0.0-1.16.b17.0.1.el5

Definition Id: oval:org.mitre.oval:def:28269

Oval ID:	oval:org.mitre.oval:def:28269
Title:	DEPRECATED: ELSA-2010-0339 -- java-1.6.0-openjdk security update (important)
Description:	[1:1.6.0.0-1.11.b16.0.1.el5] - Add oracle-enterprise.patch [1:1.6.0.0-1.11.b16.el5] - Remove javaws alternative due to conflict with java-1.6.0-sun's alternatives [1:1.6.0-1.10.b16] - Update to openjdk build b16 - Update to icedtea6-1.6 - Added tzdata-java requirement - Added autoconf and automake build requirement - Added tzdata-java requirement - Added java-1.6.0-openjdk-gcc-stack-markings.patch - Added java-1.6.0-openjdk-memory-barriers.patch - Added java-1.6.0-openjdk-jar-misc.patch - Added java-1.6.0-openjdk-linux-separate-debuginfo.patch - Added java-1.6.0-openjdk-securitypatches-20100323.patch - Added STRIP_KEEP_SYMTAB=libjvm* to install section, fix bz530402 - Resolves: rhbz#576124 [1:1.6.0-1.8.b09] - Added java-1.6.0-openjdk-debuginfo.patch - Added java-1.6.0-openjdk-elf-debuginfo.patch
Family:	unix	Class:	patch
Reference(s):	ELSA-2010-0339 CVE-2010-0082 CVE-2010-0084 CVE-2010-0085 CVE-2010-0088 CVE-2010-0091 CVE-2010-0092 CVE-2010-0093 CVE-2010-0094 CVE-2010-0095 CVE-2010-0837 CVE-2010-0838 CVE-2010-0840 CVE-2010-0845 CVE-2010-0847 CVE-2010-0848 CVE-2009-3555	Version:	4
Platform(s):	Oracle Linux 5	Product(s):	java-1.6.0-openjdk
Definition Synopsis:
Oracle Linux 5.x Packages match section java-1.6.0-openjdk is earlier than 0:1.6.0.0-1.11.b16.0.1.el5 AND java-1.6.0-openjdk-demo is earlier than 0:1.6.0.0-1.11.b16.0.1.el5 AND java-1.6.0-openjdk-devel is earlier than 0:1.6.0.0-1.11.b16.0.1.el5 AND java-1.6.0-openjdk-javadoc is earlier than 0:1.6.0.0-1.11.b16.0.1.el5 AND java-1.6.0-openjdk-src is earlier than 0:1.6.0.0-1.11.b16.0.1.el5

Definition Id: oval:org.mitre.oval:def:29317

Oval ID:	oval:org.mitre.oval:def:29317
Title:	RHSA-2009:1579 -- httpd security update (Moderate)
Description:	Updated httpd packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular Web server. A flaw was found in the way the TLS/SSL (Transport Layer Security/Secure Sockets Layer) protocols handle session renegotiation. A man-in-the-middle attacker could use this flaw to prefix arbitrary plain text to a client's session (for example, an HTTPS connection to a website). This could force the server to process an attacker's request as if authenticated using the victim's credentials. This update partially mitigates this flaw for SSL sessions to HTTP servers using mod_ssl by rejecting client-requested renegotiation. (CVE-2009-3555)
Family:	unix	Class:	patch
Reference(s):	RHSA-2009:1579 CESA-2009:1579-CentOS 3 CESA-2009:1579-CentOS 5 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555	Version:	3
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 3 CentOS Linux 3 CentOS Linux 5	Product(s):	httpd
Definition Synopsis:
Red Hat Enterprise Linux 5 release section The operating system installed on the system is Red Hat Enterprise Linux 5 Packages match section httpd-devel is earlier than 0:2.2.3-31.el5_4.2 AND httpd-manual is earlier than 0:2.2.3-31.el5_4.2 AND httpd is earlier than 0:2.2.3-31.el5_4.2 AND mod_ssl is earlier than 0:2.2.3-31.el5_4.2 AND Red Hat Enterprise Linux 3 release section The operating system installed on the system is Red Hat Enterprise Linux 3 Packages match section httpd is earlier than 0:2.0.46-77.ent AND httpd-devel is earlier than 0:2.0.46-77.ent AND mod_ssl is earlier than 0:2.0.46-77.ent AND CentOS Linux 5 release section The operating system installed on the system is CentOS Linux 5.x Packages match section httpd is earlier than 0:2.2.3-31.el5.centos.2 AND httpd-devel is earlier than 0:2.2.3-31.el5.centos.2 AND httpd-manual is earlier than 0:2.2.3-31.el5.centos.2 AND mod_ssl is earlier than 0:2.2.3-31.el5.centos.2

Definition Id: oval:org.mitre.oval:def:6758

Oval ID:	oval:org.mitre.oval:def:6758
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2182	Version:	17
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:6762

Oval ID:	oval:org.mitre.oval:def:6762
Title:	Adobe Flash Player Invalid Pointer Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newclass (0x58) operator, a different vulnerability than CVE-2010-2174.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2173	Version:	17
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:6765

Oval ID:	oval:org.mitre.oval:def:6765
Title:	Adobe Flash Player Use-After-Free Vulnerability
Description:	Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unspecified "image type within a certain function."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2164	Version:	17
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:6766

Oval ID:	oval:org.mitre.oval:def:6766
Title:	Adobe Flash Player Integer Overflow Vulnerability
Description:	Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2181 and CVE-2010-2183.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2170	Version:	17
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:6781

Oval ID:	oval:org.mitre.oval:def:6781
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2165	Version:	17
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:6903

Oval ID:	oval:org.mitre.oval:def:6903
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2175	Version:	17
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:6946

Oval ID:	oval:org.mitre.oval:def:6946
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by calling the ActionScript native object 2200 connect method multiple times with different arguments, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, and CVE-2010-2187.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2188	Version:	18
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Adobe AIR version is less than 2.0.3 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:6991

Oval ID:	oval:org.mitre.oval:def:6991
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when used in conjunction with VMWare Tools on a VMWare platform, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2189	Version:	18
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
VMWare Tools is installed Vulnerable version of Adobe AIR or Flash Player installed Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:6999

Oval ID:	oval:org.mitre.oval:def:6999
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors related to SWF files, decompression of embedded JPEG image data, and the DefineBits and other unspecified tags, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2171	Version:	18
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7014

Oval ID:	oval:org.mitre.oval:def:7014
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2180	Version:	18
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7096

Oval ID:	oval:org.mitre.oval:def:7096
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2177	Version:	18
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7116

Oval ID:	oval:org.mitre.oval:def:7116
Title:	Adobe Flash Player, Acrobat Reader, and Acrobat 'authplay.dll' Remote Code Execution Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-1297	Version:	30
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Reader Adobe Acrobat
Definition Synopsis:
Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Adobe Reader 8 Adobe Reader 8 Series is installed AND Adobe Reader 8, the sub-version is vulnerable Adobe Reader is less than 8.2.3 AND Adobe Reader library is less than 8.2.3 OR Adobe Reader 9 Adobe Reader 9 Series is installed AND Adobe Reader 9, the sub-version is vulnerable Adobe Reader is less than 9.3.3 AND Adobe Reader library is less than 9.3.3 OR Adobe Acrobat 8 Adobe Acrobat 8 Series is installed AND Adobe Acrobat 8, the sub-version is vulnerable Adobe Acrobat is less than 8.2.3 AND Adobe Acrobat library is less than 8.2.3 OR Adobe Acrobat 9 Adobe Acrobat 9 Series is installed AND Adobe Acrobat 9, the sub-version is vulnerable Adobe Acrobat is less than 9.3.3 AND Adobe Acrobat library is less than 9.3.3 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7118

Oval ID:	oval:org.mitre.oval:def:7118
Title:	Adobe Flash Player Denial of Service Vulnerability
Description:	Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2186	Version:	18
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7126

Oval ID:	oval:org.mitre.oval:def:7126
Title:	Adobe Flash Player URL Parsing Vulnerability that could lead to cross-site scripting (Firefox and Chrome browsers only)
Description:	Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to URL parsing.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2179	Version:	21
Platform(s):	Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR Google Chrome Mozilla Firefox
Definition Synopsis:
Chrome or Firefox installed Google Chrome is installed AND Mozilla Firefox is installed Vulnerable version of AIR or Flash Player installed Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7166

Oval ID:	oval:org.mitre.oval:def:7166
Title:	Adobe Flash Player Heap Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors related to improper length calculation and the (1) STSC, (2) STSZ, and (3) STCO atoms.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2162	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7187

Oval ID:	oval:org.mitre.oval:def:7187
Title:	Adobe Flash Player SWF Version Null Pointer Dereference Denial of Service Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two responses that provide SWF files with different SWF version numbers.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2008-4546	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7205

Oval ID:	oval:org.mitre.oval:def:7205
Title:	Adobe Flash Player Memory Exhaustion Vulnerability
Description:	Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or possibly execute arbitrary code via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-3793	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7266

Oval ID:	oval:org.mitre.oval:def:7266
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, and CVE-2010-2188.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2187	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7276

Oval ID:	oval:org.mitre.oval:def:7276
Title:	Adobe Flash Player Pointer Memory Corruption
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allow attackers to cause a denial of service (pointer memory corruption) or possibly execute arbitrary code via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2169	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7278

Oval ID:	oval:org.mitre.oval:def:7278
Title:	Adobe Flash Player Integer Overflow Vulnerability
Description:	Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2181.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2183	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7303

Oval ID:	oval:org.mitre.oval:def:7303
Title:	Adobe Flash Player Out Of Bounds Memory Indexing Vulnerability
Description:	Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified "types of Adobe Flash code."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2161	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7315

Oval ID:	oval:org.mitre.oval:def:7315
Title:	TLS/SSL Renegotiation Vulnerability
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.9 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.2 OR Check for vulnerable Seamonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.4 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Mozilla Thunderbird version less than 3.0.4 OR Vulnerable Microsoft Windows XP x86 Microsoft Windows XP (32-bit) is installed AND the version of schannel.dll is less than 5.1.2600.6006 OR Vulnerable Microsoft Windows XP x64, Windows Server 2003 x86/x64/ia64 XP x64/server 2003 x86/x64/ia64 Microsoft Windows XP x64 is installed AND Microsoft Windows Server 2003 (32-bit) is installed AND Microsoft Windows Server 2003 (x64) is installed AND Microsoft Windows Server 2003 (ia64) Gold is installed AND the version of schannel.dll is less than 5.2.3790.4724 OR Vulnerable Microsoft Windows Vista x86/x64, Server 2008 x86/x64/ia64 Vista x86/x64, Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND GDR or LDR Service branch the version of schannel.dll is less than 6.0.6001.18490 OR LDR the version of schannel.dll is greater than or equal to 6.0.6001.22000 AND the version of schannel.dll is less than 6.0.6001.22709 OR Vulnerable Microsoft Windows Vista x86/x64, Server 2008 x86/x64/ia64 Vista x86/x64, Server 2008 x86/x64/ia64 Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista x64 Edition is installed AND Microsoft Windows Server 2008 (32-bit) is installed AND Microsoft Windows Server 2008 (64-bit) is installed AND Microsoft Windows Server 2008 (ia-64) is installed AND GDR or LDR Service branch the version of schannel.dll is less than 6.0.6002.18269 OR LDR the version of schannel.dll is greater than or equal to 6.0.6002.22000 AND the version of schannel.dll is less than 6.0.6002.22422 OR Vulnerable Microsoft Windows 7 x86/x64, Windows Server 2008 R2 x64/ia64 7 x86/x64, Server 2008 R2 x64/ia64 Microsoft Windows 7 (32-bit) is installed AND Microsoft Windows 7 x64 Edition is installed AND Microsoft Windows Server 2008 R2 x64 Edition is installed AND Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed AND GDR or LDR Service branch the version of schannel.dll is less than 6.1.7600.16612 OR LDR the version of schannel.dll is greater than or equal to 6.1.7600.20000 AND the version of schannel.dll is less than 6.1.7600.20735

Definition Id: oval:org.mitre.oval:def:7334

Oval ID:	oval:org.mitre.oval:def:7334
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2187, and CVE-2010-2188.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2184	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7342

Oval ID:	oval:org.mitre.oval:def:7342
Title:	Adobe Flash Player Integer Overflow Vulnerability
Description:	Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2170 and CVE-2010-2183.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2181	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7364

Oval ID:	oval:org.mitre.oval:def:7364
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2178	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7415

Oval ID:	oval:org.mitre.oval:def:7415
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2176	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7431

Oval ID:	oval:org.mitre.oval:def:7431
Title:	Adobe Flash Player Memory Corruption Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2166	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7478

Oval ID:	oval:org.mitre.oval:def:7478
Title:	VMware ESX, Service Console update for OpenSSL, GnuTLS, NSS and NSPR.
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	5
Platform(s):	VMWare ESX Server 4.0	Product(s):
Definition Synopsis:
VMware ESX Server 4.0 is installed AND Patch ESX400-201009401-SG is not installed.

Definition Id: oval:org.mitre.oval:def:7491

Oval ID:	oval:org.mitre.oval:def:7491
Title:	Adobe Flash Player Multiple Heap Overflow Vulnerabilities
Description:	Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed (1) GIF or (2) JPEG data.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2167	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7501

Oval ID:	oval:org.mitre.oval:def:7501
Title:	Adobe Flash Player Multiple Vulnerabilities that could lead to code execution
Description:	Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2163	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7508

Oval ID:	oval:org.mitre.oval:def:7508
Title:	Adobe Flash Player Memory Exhaustion Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an invalid offset in an unspecified undocumented opcode in ActionScript Virtual Machine 2, related to getouterscope, a different vulnerability than CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2160	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7528

Oval ID:	oval:org.mitre.oval:def:7528
Title:	Adobe Flash Player Invalid Pointer Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newfunction (0x44) operator, a different vulnerability than CVE-2010-2173.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2174	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7577

Oval ID:	oval:org.mitre.oval:def:7577
Title:	Adobe Flash Player Buffer Overflow Vulnerability
Description:	Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2185	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe AIR
Definition Synopsis:
Vulnerable version of Adobe AIR Adobe AIR is installed AND Check if Adobe AIR version is less than or equal 1.5.3.9130 OR Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal 10.0.45.2 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Flash.ocx 10 section Determine if the version of Flash.ocx is less than or equal 10.0.45.2 AND Determine if the version of Flash.ocx is greater than or equal 10.0 OR Flash.ocx 9 section Determine if the version of Flash.ocx is less than 9.0.277.0 AND Determine if the version of Flash.ocx is greater than or equal 9.0

Definition Id: oval:org.mitre.oval:def:7973

Oval ID:	oval:org.mitre.oval:def:7973
Title:	Security Vulnerability in the Transport Layer Security (TLS) and Secure Sockets Layer 3.0 (SSLv3) Protocols Involving Handshake Renegotiation Affects Applications Utilizing Network Security Services (NSS)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	1
Platform(s):	Sun Solaris 8 Sun Solaris 9 Sun Solaris 10	Product(s):
Definition Synopsis:
Solaris 8 (SPARC) meets Sun Alert 273350 Solaris 8 (SPARC) is installed AND NOT Patch 119209-22 or later installed AND SUNWtls is installed OR Solaris 9 (SPARC) meets Sun Alert 273350 Solaris 9 (SPARC) is installed AND NOT Patch 119211-22 or later installed AND SUNWtls is installed OR Solaris 10 (SPARC) meets Sun Alert 273350 Solaris 10 (SPARC) is installed AND NOT Patch 119213-21 or later installed AND SUNWtls is installed OR Solaris 9 (x86) meets Sun Alert 273350 Solaris 9 (x86) is installed AND NOT Patch 119212-22 or later installed AND SUNWtls is installed OR Solaris 10 (x86) meets Sun Alert 273350 Solaris 10 (x86) is installed AND NOT Patch 119214-21 or later installed AND SUNWtls is installed

Definition Id: oval:org.mitre.oval:def:8201

Oval ID:	oval:org.mitre.oval:def:8201
Title:	DSA-1934 apache2 -- multiple issues
Description:	A design flaw has been found in the TLS and SSL protocol that allows an attacker to inject arbitrary content at the beginning of a TLS/SSL connection. The attack is related to the way how TLS and SSL handle session renegotiations. CVE-2009-3555 has been assigned to this vulnerability. As a partial mitigation against this attack, this apache2 update disables client-initiated renegotiations. This should fix the vulnerability for the majority of Apache configurations in use. NOTE: This is not a complete fix for the problem. The attack is still possible in configurations where the server initiates the renegotiation. This is the case for the following configurations (the information in the changelog of the updated packages is slightly inaccurate): As a workaround, you may rearrange your configuration in a way that SSLVerifyClient and SSLCipherSuite are only used on the server or virtual host level. A complete fix for the problem will require a protocol change. Further information will be included in a separate announcement about this issue. In addition, this update fixes the following issues in Apache's mod_proxy_ftp: Insufficient input validation in the mod_proxy_ftp module allowed remote FTP servers to cause a denial of service (NULL pointer dereference and child process crash) via a malformed reply to an EPSV command. Insufficient input validation in the mod_proxy_ftp module allowed remote authenticated attackers to bypass intended access restrictions and send arbitrary FTP commands to an FTP server. The oldstable distribution (etch), these problems have been fixed in version 2.2.3-4+etch11.
Family:	unix	Class:	patch
Reference(s):	DSA-1934 CVE-2009-3094 CVE-2009-3095 CVE-2009-3555	Version:	3
Platform(s):	Debian GNU/Linux 5.0 Debian GNU/Linux 4.0	Product(s):	apache2
Definition Synopsis:
Release section Debian GNU/Linux 5.0 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-doc is earlier than 2.2.9-10+lenny6 AND apache2-src is earlier than 2.2.9-10+lenny6 AND apache2 is earlier than 2.2.9-10+lenny6 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section apache2-utils is earlier than 2.2.9-10+lenny6 AND apache2-mpm-worker is earlier than 2.2.9-10+lenny6 AND apache2.2-common is earlier than 2.2.9-10+lenny6 AND apache2-suexec-custom is earlier than 2.2.9-10+lenny6 AND apache2-suexec is earlier than 2.2.9-10+lenny6 AND apache2-threaded-dev is earlier than 2.2.9-10+lenny6 AND apache2-dbg is earlier than 2.2.9-10+lenny6 AND apache2-mpm-event is earlier than 2.2.9-10+lenny6 AND apache2-mpm-prefork is earlier than 2.2.9-10+lenny6 AND apache2-prefork-dev is earlier than 2.2.9-10+lenny6 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is hppa AND Installed architecture is sparc AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Installed architecture is arm AND apache2-mpm-itk is earlier than 2.2.6-02-1+lenny2+b2 OR Release section Debian GNU/Linux 4.0 is installed. AND Architecture section Architecture independent section Installed architecture is all AND Packages section apache2-mpm-perchild is earlier than 2.2.3-4+etch11 AND apache2-doc is earlier than 2.2.3-4+etch11 AND apache2-src is earlier than 2.2.3-4+etch11 AND apache2 is earlier than 2.2.3-4+etch11 AND apache2-utils is earlier than 2.2.3-4+etch11 AND apache2-mpm-worker is earlier than 2.2.3-4+etch11 AND apache2.2-common is earlier than 2.2.3-4+etch11 AND apache2-mpm-prefork is earlier than 2.2.3-4+etch11 AND apache2-threaded-dev is earlier than 2.2.3-4+etch11 AND apache2-mpm-event is earlier than 2.2.3-4+etch11 AND apache2-mpm-itk is earlier than 2.2.3-01-2+etch4+b1 AND apache2-prefork-dev is earlier than 2.2.3-4+etch11

Definition Id: oval:org.mitre.oval:def:8366

Oval ID:	oval:org.mitre.oval:def:8366
Title:	HP-UX Running Apache, Remote Unauthorized Data Injection, Denial of Service (DoS)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
platforms HP Release B.11.11 AND HP Release B.11.23 AND HP-UX B.11.31 AND filesets tests hpuxwsAPACHE.APACHE2 version is less than B.2.0.59.13 AND hpuxwsAPCH32.PHP version is less than B.2.0.59.13 AND hpuxwsAPCH32.PHP2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.AUTH_LDAP version is less than B.2.0.59.13 AND hpuxwsAPACHE.AUTH_LDAP2 version is less than B.2.0.59.13 AND hpuxwsAPCH32.APACHE version is less than B.2.0.59.13 AND hpuxwsAPACHE.MOD_JK version is less than B.2.0.59.13 AND hpuxwsAPCH32.APACHE2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.MOD_JK2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.MOD_PERL version is less than B.2.0.59.13 AND hpuxwsAPCH32.AUTH_LDAP version is less than B.2.0.59.13 AND hpuxwsAPCH32.AUTH_LDAP2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.MOD_PERL2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.PHP version is less than B.2.0.59.13 AND hpuxwsAPCH32.MOD_JK version is less than B.2.0.59.13 AND hpuxwsAPACHE.PHP2 version is less than B.2.0.59.13 AND hpuxwsAPCH32.MOD_JK2 version is less than B.2.0.59.13 AND hpuxwsAPCH32.WEBPROXY version is less than B.2.0.59.13 AND hpuxwsAPACHE.WEBPROXY version is less than B.2.0.59.13 AND hpuxwsAPCH32.MOD_PERL version is less than B.2.0.59.13 AND hpuxwsAPCH32.MOD_PERL2 version is less than B.2.0.59.13 AND hpuxwsAPACHE.APACHE version is less than B.2.0.59.13

Definition Id: oval:org.mitre.oval:def:8535

Oval ID:	oval:org.mitre.oval:def:8535
Title:	HP-UX Running OpenSSL, Remote Unauthorized Data Injection, Denial of Service (DoS)
Description:	The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-3555	Version:	11
Platform(s):	HP-UX 11	Product(s):
Definition Synopsis:
Criteria meets HP Security Bulletin HPSBUX02482 HP Release B.11.23 AND filesets tests openssl.OPENSSL-PVT version is less than A.00.09.08l.002 AND openssl.OPENSSL-RUN version is less than A.00.09.08l.002 AND openssl.OPENSSL-CER version is less than A.00.09.08l.002 AND openssl.OPENSSL-CONF version is less than A.00.09.08l.002 AND openssl.OPENSSL-DOC version is less than A.00.09.08l.002 AND openssl.OPENSSL-INC version is less than A.00.09.08l.002 AND openssl.OPENSSL-LIB version is less than A.00.09.08l.002 AND openssl.OPENSSL-MAN version is less than A.00.09.08l.002 AND openssl.OPENSSL-MIS version is less than A.00.09.08l.002 AND openssl.OPENSSL-SRC version is less than A.00.09.08l.002 AND openssl.OPENSSL-PRNG version is less than A.00.09.08l.002 OR Criteria meets HP Security Bulletin HPSBUX02482 HP Release B.11.11 AND filesets tests openssl.OPENSSL-PVT version is less than A.00.09.08l.001 AND openssl.OPENSSL-RUN version is less than A.00.09.08l.001 AND openssl.OPENSSL-CER version is less than A.00.09.08l.001 AND openssl.OPENSSL-CONF version is less than A.00.09.08l.001 AND openssl.OPENSSL-DOC version is less than A.00.09.08l.001 AND openssl.OPENSSL-INC version is less than A.00.09.08l.001 AND openssl.OPENSSL-LIB version is less than A.00.09.08l.001 AND openssl.OPENSSL-MAN version is less than A.00.09.08l.001 AND openssl.OPENSSL-SRC version is less than A.00.09.08l.001 AND openssl.OPENSSL-MIS version is less than A.00.09.08l.001 AND openssl.OPENSSL-PRNG version is less than A.00.09.08l.001 OR Criteria meets HP Security Bulletin HPSBUX02482 HP-UX B.11.31 AND filesets tests openssl.OPENSSL-PRNG version is less than A.00.09.08l.003 AND openssl.OPENSSL-RUN version is less than A.00.09.08l.003 AND openssl.OPENSSL-CER version is less than A.00.09.08l.003 AND openssl.OPENSSL-CONF version is less than A.00.09.08l.003 AND openssl.OPENSSL-DOC version is less than A.00.09.08l.003 AND openssl.OPENSSL-INC version is less than A.00.09.08l.003 AND openssl.OPENSSL-LIB version is less than A.00.09.08l.003 AND openssl.OPENSSL-MAN version is less than A.00.09.08l.003 AND openssl.OPENSSL-SRC version is less than A.00.09.08l.003 AND openssl.OPENSSL-MIS version is less than A.00.09.08l.003 AND openssl.OPENSSL-PRNG version is less than A.00.09.08l.003

Definition Id: oval:org.mitre.oval:def:9855

Oval ID:	oval:org.mitre.oval:def:9855
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0091	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:9877

Oval ID:	oval:org.mitre.oval:def:9877
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0093	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:9896

Oval ID:	oval:org.mitre.oval:def:9896
Title:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0845	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:9899

Oval ID:	oval:org.mitre.oval:def:9899
Title:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Description:	Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0848	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

Definition Id: oval:org.mitre.oval:def:9974

Oval ID:	oval:org.mitre.oval:def:9974
Title:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
Description:	Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0840	Version:	5
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section java-1.6.0-openjdk-src is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-javadoc is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-demo is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk-devel is earlier than 1:1.6.0.0-1.11.b16.el5 AND java-1.6.0-openjdk is earlier than 1:1.6.0.0-1.11.b16.el5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Adobe Air cpe:2.3:a:adobe:air:2.0.0:::::::* cpe:2.3:a:adobe:air:1.5.3.9130:::::::* cpe:2.3:a:adobe:air:1.5.3:::::::* cpe:2.3:a:adobe:air:1.5.2:::::::* cpe:2.3:a:adobe:air:1.5.1:::::::* cpe:2.3:a:adobe:air:1.5:::::::* cpe:2.3:a:adobe:air:1.1:::::::* cpe:2.3:a:adobe:air:1.01:::::::* cpe:2.3:a:adobe:air:1.0:::::::* cpe:2.3:a:adobe:air::::::::	10
Application	Adobe Flash Player cpe:2.3:a:adobe:flash_player:10.1.52.15:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.14.1:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.14:::::::* cpe:2.3:a:adobe:flash_player:10.1:::::::* cpe:2.3:a:adobe:flash_player:10.0.45.2:::::::* cpe:2.3:a:adobe:flash_player:10.0.42.34:::::::* cpe:2.3:a:adobe:flash_player:10.0.32.18:::::::* cpe:2.3:a:adobe:flash_player:10.0.22.87:::::::* cpe:2.3:a:adobe:flash_player:10.0.2.54:::::::* cpe:2.3:a:adobe:flash_player:10.0.15.3:::::::* cpe:2.3:a:adobe:flash_player:10.0.12.36:::::::* cpe:2.3:a:adobe:flash_player:10.0.12.10:::::::* cpe:2.3:a:adobe:flash_player:10.0.0.584:::::::* cpe:2.3:a:adobe:flash_player:10:::::::* cpe:2.3:a:adobe:flash_player:9.125.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.9.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.8.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.48.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.47.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.45.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.31.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.31:::::::* cpe:2.3:a:adobe:flash_player:9.0.283.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.280:::::::* cpe:2.3:a:adobe:flash_player:9.0.28.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.28.0::mac_os_x::::: cpe:2.3:a:adobe:flash_player:9.0.28:::::::* cpe:2.3:a:adobe:flash_player:9.0.277.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.262.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.260.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.246.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.20.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.20:::::::* cpe:2.3:a:adobe:flash_player:9.0.18d60:::::::* cpe:2.3:a:adobe:flash_player:9.0.16.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.16:::::::* cpe:2.3:a:adobe:flash_player:9.0.16::windows::::: cpe:2.3:a:adobe:flash_player:9.0.159.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.155.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.152.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.151.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.125.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.124.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.115.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.114.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.112.0:::::::* cpe:2.3:a:adobe:flash_player:9.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.42.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.39.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.35.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.34.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.33.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.24.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.22.0:::::::* cpe:2.3:a:adobe:flash_player:8.0:::::::* cpe:2.3:a:adobe:flash_player:8.0::pro::::: cpe:2.3:a:adobe:flash_player:8.0::basic::::: cpe:2.3:a:adobe:flash_player:8::professional::::: cpe:2.3:a:adobe:flash_player:8::pro::::: cpe:2.3:a:adobe:flash_player:7.2:::::::* cpe:2.3:a:adobe:flash_player:7.1.1:::::::* cpe:2.3:a:adobe:flash_player:7.1:::::::* cpe:2.3:a:adobe:flash_player:7.0.73.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.70.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.69.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.68.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.67.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.66.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.63:::::::* cpe:2.3:a:adobe:flash_player:7.0.63::linux::::: cpe:2.3:a:adobe:flash_player:7.0.61.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.60.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.53.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.25:::::::* cpe:2.3:a:adobe:flash_player:7.0.24.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.19.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.14.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.1:::::::* cpe:2.3:a:adobe:flash_player:7.0_r67::solaris::::: cpe:2.3:a:adobe:flash_player:7.0_r67:::::::* cpe:2.3:a:adobe:flash_player:7.0:::::::* cpe:2.3:a:adobe:flash_player:6.0.79:::::::* cpe:2.3:a:adobe:flash_player:6.0.21.0:::::::* cpe:2.3:a:adobe:flash_player:6:::::::* cpe:2.3:a:adobe:flash_player:5:::::::* cpe:2.3:a:adobe:flash_player:4:::::::* cpe:2.3:a:adobe:flash_player:3:::::::* cpe:2.3:a:adobe:flash_player:2:::::::* cpe:2.3:a:adobe:flash_player:mx_2004:::::::* cpe:2.3:a:adobe:flash_player:cs4::pro::::: cpe:2.3:a:adobe:flash_player:cs3::pro::::: cpe:2.3:a:adobe:flash_player:cs3::professional::::: cpe:2.3:a:adobe:flash_player:::::::: cpe:2.3:a:adobe:flash_player:::basic:::::* cpe:2.3:a:adobe:flash_player:::pro:::::* cpe:2.3:a:adobe:flash_player::::::edge::* cpe:2.3:a:adobe:flash_player::::::internet_explorer_11::* cpe:2.3:a:adobe:flash_player::::::chrome::* cpe:2.3:a:adobe:flash_player:-:::::::*	99
Application	Apache Http Server cpe:2.3:a:apache:http_server:2.2.9:::::::* cpe:2.3:a:apache:http_server:2.2.8:::::::* cpe:2.3:a:apache:http_server:2.2.7:::::::* cpe:2.3:a:apache:http_server:2.2.6:::::::* cpe:2.3:a:apache:http_server:2.2.5:::::::* cpe:2.3:a:apache:http_server:2.2.4:::::::* cpe:2.3:a:apache:http_server:2.2.3:::::::* cpe:2.3:a:apache:http_server:2.2.3::windows::::: cpe:2.3:a:apache:http_server:2.2.2:::::::* cpe:2.3:a:apache:http_server:2.2.2::windows::::: cpe:2.3:a:apache:http_server:2.2.14:::::::* cpe:2.3:a:apache:http_server:2.2.13:::::::* cpe:2.3:a:apache:http_server:2.2.12:::::::* cpe:2.3:a:apache:http_server:2.2.11:::::::* cpe:2.3:a:apache:http_server:2.2.10:::::::* cpe:2.3:a:apache:http_server:2.2.1:::::::* cpe:2.3:a:apache:http_server:2.2.0:::::::* cpe:2.3:a:apache:http_server:2.2:::::::* cpe:2.3:a:apache:http_server:2.1.9:::::::* cpe:2.3:a:apache:http_server:2.1.8:::::::* cpe:2.3:a:apache:http_server:2.1.7:::::::* cpe:2.3:a:apache:http_server:2.1.6:::::::* cpe:2.3:a:apache:http_server:2.1.5:::::::* cpe:2.3:a:apache:http_server:2.1.4:::::::* cpe:2.3:a:apache:http_server:2.1.3:::::::* cpe:2.3:a:apache:http_server:2.1.2:::::::* cpe:2.3:a:apache:http_server:2.1.1:::::::* cpe:2.3:a:apache:http_server:2.1.0:::::::* cpe:2.3:a:apache:http_server:2.1:::::::* cpe:2.3:a:apache:http_server:2.0.9:::::::* cpe:2.3:a:apache:http_server:2.0.65:::::::* cpe:2.3:a:apache:http_server:2.0.64:::::::* cpe:2.3:a:apache:http_server:2.0.63:::::::* cpe:2.3:a:apache:http_server:2.0.61:::::::* cpe:2.3:a:apache:http_server:2.0.60:::::::* cpe:2.3:a:apache:http_server:2.0.59:::::::* cpe:2.3:a:apache:http_server:2.0.58:::::::* cpe:2.3:a:apache:http_server:2.0.58::win32::::: cpe:2.3:a:apache:http_server:2.0.57:::::::* cpe:2.3:a:apache:http_server:2.0.56:::::::* cpe:2.3:a:apache:http_server:2.0.55:::::::* cpe:2.3:a:apache:http_server:2.0.54:::::::* cpe:2.3:a:apache:http_server:2.0.53:::::::* cpe:2.3:a:apache:http_server:2.0.52:::::::* cpe:2.3:a:apache:http_server:2.0.51:::::::* cpe:2.3:a:apache:http_server:2.0.50:::::::* cpe:2.3:a:apache:http_server:2.0.49:::::::* cpe:2.3:a:apache:http_server:2.0.48:::::::* cpe:2.3:a:apache:http_server:2.0.47:::::::* cpe:2.3:a:apache:http_server:2.0.46:::::::* cpe:2.3:a:apache:http_server:2.0.46::win32::::: cpe:2.3:a:apache:http_server:2.0.45:::::::* cpe:2.3:a:apache:http_server:2.0.44:::::::* cpe:2.3:a:apache:http_server:2.0.43:::::::* cpe:2.3:a:apache:http_server:2.0.42:::::::* cpe:2.3:a:apache:http_server:2.0.41:::::::* cpe:2.3:a:apache:http_server:2.0.40:::::::* cpe:2.3:a:apache:http_server:2.0.39:::::::* cpe:2.3:a:apache:http_server:2.0.38:::::::* cpe:2.3:a:apache:http_server:2.0.37:::::::* cpe:2.3:a:apache:http_server:2.0.36:::::::* cpe:2.3:a:apache:http_server:2.0.35:::::::* cpe:2.3:a:apache:http_server:2.0.34:beta:::::: cpe:2.3:a:apache:http_server:2.0.34:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.34:::::::* cpe:2.3:a:apache:http_server:2.0.33:::::::* cpe:2.3:a:apache:http_server:2.0.32:beta:::::: cpe:2.3:a:apache:http_server:2.0.32:::::::* cpe:2.3:a:apache:http_server:2.0.32:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.31:::::::* cpe:2.3:a:apache:http_server:2.0.30:::::::* cpe:2.3:a:apache:http_server:2.0.29:::::::* cpe:2.3:a:apache:http_server:2.0.28:beta:::::: cpe:2.3:a:apache:http_server:2.0.28:::::::* cpe:2.3:a:apache:http_server:2.0.28:beta:win32:::::* cpe:2.3:a:apache:http_server:2.0.27:::::::* cpe:2.3:a:apache:http_server:2.0.26:::::::* cpe:2.3:a:apache:http_server:2.0.25:::::::* cpe:2.3:a:apache:http_server:2.0.24:::::::* cpe:2.3:a:apache:http_server:2.0.23:::::::* cpe:2.3:a:apache:http_server:2.0.22:::::::* cpe:2.3:a:apache:http_server:2.0.21:::::::* cpe:2.3:a:apache:http_server:2.0.20:::::::* cpe:2.3:a:apache:http_server:2.0.19:::::::* cpe:2.3:a:apache:http_server:2.0.18:::::::* cpe:2.3:a:apache:http_server:2.0.17:::::::* cpe:2.3:a:apache:http_server:2.0.16:::::::* cpe:2.3:a:apache:http_server:2.0.15:::::::* cpe:2.3:a:apache:http_server:2.0.14:::::::* cpe:2.3:a:apache:http_server:2.0.13:::::::* cpe:2.3:a:apache:http_server:2.0.12:::::::* cpe:2.3:a:apache:http_server:2.0.11:::::::* cpe:2.3:a:apache:http_server:2.0.0:::::::* cpe:2.3:a:apache:http_server:2.0:::::::* cpe:2.3:a:apache:http_server:2.0:alpha9:::::: cpe:2.3:a:apache:http_server:1.99:::::::* cpe:2.3:a:apache:http_server:1.4.0:::::::* cpe:2.3:a:apache:http_server:1.3.9:::::::* cpe:2.3:a:apache:http_server:1.3.9::win32::::: cpe:2.3:a:apache:http_server:1.3.8:::::::* cpe:2.3:a:apache:http_server:1.3.7:::::::* cpe:2.3:a:apache:http_server:1.3.7::dev::::: cpe:2.3:a:apache:http_server:1.3.68:::::::* cpe:2.3:a:apache:http_server:1.3.65:::::::* cpe:2.3:a:apache:http_server:1.3.6:::::::* cpe:2.3:a:apache:http_server:1.3.6::win32::::: cpe:2.3:a:apache:http_server:1.3.5:::::::* cpe:2.3:a:apache:http_server:1.3.42:::::::* cpe:2.3:a:apache:http_server:1.3.41:::::::* cpe:2.3:a:apache:http_server:1.3.40:::::::* cpe:2.3:a:apache:http_server:1.3.4:::::::* cpe:2.3:a:apache:http_server:1.3.39:::::::* cpe:2.3:a:apache:http_server:1.3.38:::::::* cpe:2.3:a:apache:http_server:1.3.37:::::::* cpe:2.3:a:apache:http_server:1.3.36:::::::* cpe:2.3:a:apache:http_server:1.3.35:::::::* cpe:2.3:a:apache:http_server:1.3.34:::::::* cpe:2.3:a:apache:http_server:1.3.33:::::::* cpe:2.3:a:apache:http_server:1.3.32:::::::* cpe:2.3:a:apache:http_server:1.3.31:::::::* cpe:2.3:a:apache:http_server:1.3.30:::::::* cpe:2.3:a:apache:http_server:1.3.3:::::::* cpe:2.3:a:apache:http_server:1.3.29:::::::* cpe:2.3:a:apache:http_server:1.3.28:::::::* cpe:2.3:a:apache:http_server:1.3.27:::::::* cpe:2.3:a:apache:http_server:1.3.26:::::::* cpe:2.3:a:apache:http_server:1.3.26::win32::::: cpe:2.3:a:apache:http_server:1.3.25:::::::* cpe:2.3:a:apache:http_server:1.3.25::win32::::: cpe:2.3:a:apache:http_server:1.3.24:::::::* cpe:2.3:a:apache:http_server:1.3.24::win32::::: cpe:2.3:a:apache:http_server:1.3.23:::::::* cpe:2.3:a:apache:http_server:1.3.23::win32::::: cpe:2.3:a:apache:http_server:1.3.22:::::::* cpe:2.3:a:apache:http_server:1.3.22::win32::::: cpe:2.3:a:apache:http_server:1.3.20:::::::* cpe:2.3:a:apache:http_server:1.3.20::win32::::: cpe:2.3:a:apache:http_server:1.3.2:::::::* cpe:2.3:a:apache:http_server:1.3.19:::::::* cpe:2.3:a:apache:http_server:1.3.19::win32::::: cpe:2.3:a:apache:http_server:1.3.18:::::::* cpe:2.3:a:apache:http_server:1.3.18::win32::::: cpe:2.3:a:apache:http_server:1.3.17:::::::* cpe:2.3:a:apache:http_server:1.3.17::win32::::: cpe:2.3:a:apache:http_server:1.3.16:::::::* cpe:2.3:a:apache:http_server:1.3.16::win32::::: cpe:2.3:a:apache:http_server:1.3.15:::::::* cpe:2.3:a:apache:http_server:1.3.15::win32::::: cpe:2.3:a:apache:http_server:1.3.14:::::::* cpe:2.3:a:apache:http_server:1.3.14::win32::::: cpe:2.3:a:apache:http_server:1.3.14::mac_os::::: cpe:2.3:a:apache:http_server:1.3.13:::::::* cpe:2.3:a:apache:http_server:1.3.13::win32::::: cpe:2.3:a:apache:http_server:1.3.12:::::::* cpe:2.3:a:apache:http_server:1.3.12::win32::::: cpe:2.3:a:apache:http_server:1.3.11:::::::* cpe:2.3:a:apache:http_server:1.3.11::win32::::: cpe:2.3:a:apache:http_server:1.3.10:::::::* cpe:2.3:a:apache:http_server:1.3.1.1:::::::* cpe:2.3:a:apache:http_server:1.3.1:::::::* cpe:2.3:a:apache:http_server:1.3.0:::::::* cpe:2.3:a:apache:http_server:1.3:::::::* cpe:2.3:a:apache:http_server:1.2.9:::::::* cpe:2.3:a:apache:http_server:1.2.6:::::::* cpe:2.3:a:apache:http_server:1.2.5:::::::* cpe:2.3:a:apache:http_server:1.2.4:::::::* cpe:2.3:a:apache:http_server:1.2.0:::::::* cpe:2.3:a:apache:http_server:1.15.17:::::::* cpe:2.3:a:apache:http_server:1.1.1:::::::* cpe:2.3:a:apache:http_server:1.1:::::::* cpe:2.3:a:apache:http_server:1.0.5:::::::* cpe:2.3:a:apache:http_server:1.0.3:::::::* cpe:2.3:a:apache:http_server:1.0.2:::::::* cpe:2.3:a:apache:http_server:1.0:::::::* cpe:2.3:a:apache:http_server:0.8.14:::::::* cpe:2.3:a:apache:http_server:0.8.11:::::::* cpe:2.3:a:apache:http_server:::::::: cpe:2.3:a:apache:http_server:::win32:::::* cpe:2.3:a:apache:http_server:-:::::::*	179
Application	f5 Nginx cpe:2.3:a:f5:nginx:0.8.9:::::::* cpe:2.3:a:f5:nginx:0.8.8:::::::* cpe:2.3:a:f5:nginx:0.8.7:::::::* cpe:2.3:a:f5:nginx:0.8.6:::::::* cpe:2.3:a:f5:nginx:0.8.5:::::::* cpe:2.3:a:f5:nginx:0.8.4:::::::* cpe:2.3:a:f5:nginx:0.8.3:::::::* cpe:2.3:a:f5:nginx:0.8.22:::::::* cpe:2.3:a:f5:nginx:0.8.21:::::::* cpe:2.3:a:f5:nginx:0.8.20:::::::* cpe:2.3:a:f5:nginx:0.8.2:::::::* cpe:2.3:a:f5:nginx:0.8.19:::::::* cpe:2.3:a:f5:nginx:0.8.18:::::::* cpe:2.3:a:f5:nginx:0.8.17:::::::* cpe:2.3:a:f5:nginx:0.8.16:::::::* cpe:2.3:a:f5:nginx:0.8.15:::::::* cpe:2.3:a:f5:nginx:0.8.14:::::::* cpe:2.3:a:f5:nginx:0.8.13:::::::* cpe:2.3:a:f5:nginx:0.8.12:::::::* cpe:2.3:a:f5:nginx:0.8.11:::::::* cpe:2.3:a:f5:nginx:0.8.10:::::::* cpe:2.3:a:f5:nginx:0.8.1:::::::* cpe:2.3:a:f5:nginx:0.8.0:::::::* cpe:2.3:a:f5:nginx:0.7.9:::::::* cpe:2.3:a:f5:nginx:0.7.8:::::::* cpe:2.3:a:f5:nginx:0.7.7:::::::* cpe:2.3:a:f5:nginx:0.7.69:::::::* cpe:2.3:a:f5:nginx:0.7.68:::::::* cpe:2.3:a:f5:nginx:0.7.67:::::::* cpe:2.3:a:f5:nginx:0.7.66:::::::* cpe:2.3:a:f5:nginx:0.7.65:::::::* cpe:2.3:a:f5:nginx:0.7.64:::::::* cpe:2.3:a:f5:nginx:0.7.63:::::::* cpe:2.3:a:f5:nginx:0.7.62:::::::* cpe:2.3:a:f5:nginx:0.7.61:::::::* cpe:2.3:a:f5:nginx:0.7.60:::::::* cpe:2.3:a:f5:nginx:0.7.6:::::::* cpe:2.3:a:f5:nginx:0.7.59:::::::* cpe:2.3:a:f5:nginx:0.7.58:::::::* cpe:2.3:a:f5:nginx:0.7.57:::::::* cpe:2.3:a:f5:nginx:0.7.56:::::::* cpe:2.3:a:f5:nginx:0.7.55:::::::* cpe:2.3:a:f5:nginx:0.7.54:::::::* cpe:2.3:a:f5:nginx:0.7.53:::::::* cpe:2.3:a:f5:nginx:0.7.52:::::::* cpe:2.3:a:f5:nginx:0.7.51:::::::* cpe:2.3:a:f5:nginx:0.7.50:::::::* cpe:2.3:a:f5:nginx:0.7.5:::::::* cpe:2.3:a:f5:nginx:0.7.49:::::::* cpe:2.3:a:f5:nginx:0.7.48:::::::* cpe:2.3:a:f5:nginx:0.7.47:::::::* cpe:2.3:a:f5:nginx:0.7.46:::::::* cpe:2.3:a:f5:nginx:0.7.45:::::::* cpe:2.3:a:f5:nginx:0.7.44:::::::* cpe:2.3:a:f5:nginx:0.7.43:::::::* cpe:2.3:a:f5:nginx:0.7.42:::::::* cpe:2.3:a:f5:nginx:0.7.41:::::::* cpe:2.3:a:f5:nginx:0.7.40:::::::* cpe:2.3:a:f5:nginx:0.7.4:::::::* cpe:2.3:a:f5:nginx:0.7.39:::::::* cpe:2.3:a:f5:nginx:0.7.38:::::::* cpe:2.3:a:f5:nginx:0.7.37:::::::* cpe:2.3:a:f5:nginx:0.7.36:::::::* cpe:2.3:a:f5:nginx:0.7.35:::::::* cpe:2.3:a:f5:nginx:0.7.34:::::::* cpe:2.3:a:f5:nginx:0.7.33:::::::* cpe:2.3:a:f5:nginx:0.7.32:::::::* cpe:2.3:a:f5:nginx:0.7.31:::::::* cpe:2.3:a:f5:nginx:0.7.30:::::::* cpe:2.3:a:f5:nginx:0.7.3:::::::* cpe:2.3:a:f5:nginx:0.7.29:::::::* cpe:2.3:a:f5:nginx:0.7.28:::::::* cpe:2.3:a:f5:nginx:0.7.27:::::::* cpe:2.3:a:f5:nginx:0.7.26:::::::* cpe:2.3:a:f5:nginx:0.7.25:::::::* cpe:2.3:a:f5:nginx:0.7.24:::::::* cpe:2.3:a:f5:nginx:0.7.23:::::::* cpe:2.3:a:f5:nginx:0.7.22:::::::* cpe:2.3:a:f5:nginx:0.7.21:::::::* cpe:2.3:a:f5:nginx:0.7.20:::::::* cpe:2.3:a:f5:nginx:0.7.2:::::::* cpe:2.3:a:f5:nginx:0.7.19:::::::* cpe:2.3:a:f5:nginx:0.7.18:::::::* cpe:2.3:a:f5:nginx:0.7.17:::::::* cpe:2.3:a:f5:nginx:0.7.16:::::::* cpe:2.3:a:f5:nginx:0.7.15:::::::* cpe:2.3:a:f5:nginx:0.7.14:::::::* cpe:2.3:a:f5:nginx:0.7.13:::::::* cpe:2.3:a:f5:nginx:0.7.12:::::::* cpe:2.3:a:f5:nginx:0.7.11:::::::* cpe:2.3:a:f5:nginx:0.7.10:::::::* cpe:2.3:a:f5:nginx:0.7.1:::::::* cpe:2.3:a:f5:nginx:0.7.0:::::::* cpe:2.3:a:f5:nginx:0.6.9:::::::* cpe:2.3:a:f5:nginx:0.6.8:::::::* cpe:2.3:a:f5:nginx:0.6.7:::::::* cpe:2.3:a:f5:nginx:0.6.6:::::::* cpe:2.3:a:f5:nginx:0.6.5:::::::* cpe:2.3:a:f5:nginx:0.6.4:::::::* cpe:2.3:a:f5:nginx:0.6.39:::::::* cpe:2.3:a:f5:nginx:0.6.38:::::::* cpe:2.3:a:f5:nginx:0.6.37:::::::* cpe:2.3:a:f5:nginx:0.6.36:::::::* cpe:2.3:a:f5:nginx:0.6.35:::::::* cpe:2.3:a:f5:nginx:0.6.34:::::::* cpe:2.3:a:f5:nginx:0.6.33:::::::* cpe:2.3:a:f5:nginx:0.6.32:::::::* cpe:2.3:a:f5:nginx:0.6.31:::::::* cpe:2.3:a:f5:nginx:0.6.30:::::::* cpe:2.3:a:f5:nginx:0.6.3:::::::* cpe:2.3:a:f5:nginx:0.6.29:::::::* cpe:2.3:a:f5:nginx:0.6.28:::::::* cpe:2.3:a:f5:nginx:0.6.27:::::::* cpe:2.3:a:f5:nginx:0.6.26:::::::* cpe:2.3:a:f5:nginx:0.6.25:::::::* cpe:2.3:a:f5:nginx:0.6.24:::::::* cpe:2.3:a:f5:nginx:0.6.23:::::::* cpe:2.3:a:f5:nginx:0.6.22:::::::* cpe:2.3:a:f5:nginx:0.6.21:::::::* cpe:2.3:a:f5:nginx:0.6.20:::::::* cpe:2.3:a:f5:nginx:0.6.2:::::::* cpe:2.3:a:f5:nginx:0.6.19:::::::* cpe:2.3:a:f5:nginx:0.6.18:::::::* cpe:2.3:a:f5:nginx:0.6.17:::::::* cpe:2.3:a:f5:nginx:0.6.16:::::::* cpe:2.3:a:f5:nginx:0.6.15:::::::* cpe:2.3:a:f5:nginx:0.6.14:::::::* cpe:2.3:a:f5:nginx:0.6.13:::::::* cpe:2.3:a:f5:nginx:0.6.12:::::::* cpe:2.3:a:f5:nginx:0.6.11:::::::* cpe:2.3:a:f5:nginx:0.6.10:::::::* cpe:2.3:a:f5:nginx:0.6.1:::::::* cpe:2.3:a:f5:nginx:0.6.0:::::::* cpe:2.3:a:f5:nginx:0.5.9:::::::* cpe:2.3:a:f5:nginx:0.5.8:::::::* cpe:2.3:a:f5:nginx:0.5.7:::::::* cpe:2.3:a:f5:nginx:0.5.6:::::::* cpe:2.3:a:f5:nginx:0.5.5:::::::* cpe:2.3:a:f5:nginx:0.5.4:::::::* cpe:2.3:a:f5:nginx:0.5.38:::::::* cpe:2.3:a:f5:nginx:0.5.37:::::::* cpe:2.3:a:f5:nginx:0.5.36:::::::* cpe:2.3:a:f5:nginx:0.5.35:::::::* cpe:2.3:a:f5:nginx:0.5.34:::::::* cpe:2.3:a:f5:nginx:0.5.33:::::::* cpe:2.3:a:f5:nginx:0.5.32:::::::* cpe:2.3:a:f5:nginx:0.5.31:::::::* cpe:2.3:a:f5:nginx:0.5.30:::::::* cpe:2.3:a:f5:nginx:0.5.3:::::::* cpe:2.3:a:f5:nginx:0.5.29:::::::* cpe:2.3:a:f5:nginx:0.5.28:::::::* cpe:2.3:a:f5:nginx:0.5.27:::::::* cpe:2.3:a:f5:nginx:0.5.26:::::::* cpe:2.3:a:f5:nginx:0.5.25:::::::* cpe:2.3:a:f5:nginx:0.5.24:::::::* cpe:2.3:a:f5:nginx:0.5.23:::::::* cpe:2.3:a:f5:nginx:0.5.22:::::::* cpe:2.3:a:f5:nginx:0.5.21:::::::* cpe:2.3:a:f5:nginx:0.5.20:::::::* cpe:2.3:a:f5:nginx:0.5.2:::::::* cpe:2.3:a:f5:nginx:0.5.19:::::::* cpe:2.3:a:f5:nginx:0.5.18:::::::* cpe:2.3:a:f5:nginx:0.5.17:::::::* cpe:2.3:a:f5:nginx:0.5.16:::::::* cpe:2.3:a:f5:nginx:0.5.15:::::::* cpe:2.3:a:f5:nginx:0.5.14:::::::* cpe:2.3:a:f5:nginx:0.5.13:::::::* cpe:2.3:a:f5:nginx:0.5.12:::::::* cpe:2.3:a:f5:nginx:0.5.11:::::::* cpe:2.3:a:f5:nginx:0.5.10:::::::* cpe:2.3:a:f5:nginx:0.5.1:::::::* cpe:2.3:a:f5:nginx:0.5.0:::::::* cpe:2.3:a:f5:nginx:0.4.9:::::::* cpe:2.3:a:f5:nginx:0.4.8:::::::* cpe:2.3:a:f5:nginx:0.4.7:::::::* cpe:2.3:a:f5:nginx:0.4.6:::::::* cpe:2.3:a:f5:nginx:0.4.5:::::::* cpe:2.3:a:f5:nginx:0.4.4:::::::* cpe:2.3:a:f5:nginx:0.4.3:::::::* cpe:2.3:a:f5:nginx:0.4.2:::::::* cpe:2.3:a:f5:nginx:0.4.14:::::::* cpe:2.3:a:f5:nginx:0.4.13:::::::* cpe:2.3:a:f5:nginx:0.4.12:::::::* cpe:2.3:a:f5:nginx:0.4.11:::::::* cpe:2.3:a:f5:nginx:0.4.10:::::::* cpe:2.3:a:f5:nginx:0.4.1:::::::* cpe:2.3:a:f5:nginx:0.4.0:::::::* cpe:2.3:a:f5:nginx:0.3.9:::::::* cpe:2.3:a:f5:nginx:0.3.8:::::::* cpe:2.3:a:f5:nginx:0.3.7:::::::* cpe:2.3:a:f5:nginx:0.3.61:::::::* cpe:2.3:a:f5:nginx:0.3.60:::::::* cpe:2.3:a:f5:nginx:0.3.6:::::::* cpe:2.3:a:f5:nginx:0.3.59:::::::* cpe:2.3:a:f5:nginx:0.3.58:::::::* cpe:2.3:a:f5:nginx:0.3.57:::::::* cpe:2.3:a:f5:nginx:0.3.56:::::::* cpe:2.3:a:f5:nginx:0.3.55:::::::* cpe:2.3:a:f5:nginx:0.3.54:::::::* cpe:2.3:a:f5:nginx:0.3.53:::::::* cpe:2.3:a:f5:nginx:0.3.52:::::::* cpe:2.3:a:f5:nginx:0.3.51:::::::* cpe:2.3:a:f5:nginx:0.3.50:::::::* cpe:2.3:a:f5:nginx:0.3.5:::::::* cpe:2.3:a:f5:nginx:0.3.49:::::::* cpe:2.3:a:f5:nginx:0.3.48:::::::* cpe:2.3:a:f5:nginx:0.3.47:::::::* cpe:2.3:a:f5:nginx:0.3.46:::::::* cpe:2.3:a:f5:nginx:0.3.45:::::::* cpe:2.3:a:f5:nginx:0.3.44:::::::* cpe:2.3:a:f5:nginx:0.3.43:::::::* cpe:2.3:a:f5:nginx:0.3.42:::::::* cpe:2.3:a:f5:nginx:0.3.41:::::::* cpe:2.3:a:f5:nginx:0.3.40:::::::* cpe:2.3:a:f5:nginx:0.3.4:::::::* cpe:2.3:a:f5:nginx:0.3.39:::::::* cpe:2.3:a:f5:nginx:0.3.38:::::::* cpe:2.3:a:f5:nginx:0.3.37:::::::* cpe:2.3:a:f5:nginx:0.3.36:::::::* cpe:2.3:a:f5:nginx:0.3.35:::::::* cpe:2.3:a:f5:nginx:0.3.34:::::::* cpe:2.3:a:f5:nginx:0.3.33:::::::* cpe:2.3:a:f5:nginx:0.3.32:::::::* cpe:2.3:a:f5:nginx:0.3.31:::::::* cpe:2.3:a:f5:nginx:0.3.30:::::::* cpe:2.3:a:f5:nginx:0.3.3:::::::* cpe:2.3:a:f5:nginx:0.3.29:::::::* cpe:2.3:a:f5:nginx:0.3.28:::::::* cpe:2.3:a:f5:nginx:0.3.27:::::::* cpe:2.3:a:f5:nginx:0.3.26:::::::* cpe:2.3:a:f5:nginx:0.3.25:::::::* cpe:2.3:a:f5:nginx:0.3.24:::::::* cpe:2.3:a:f5:nginx:0.3.23:::::::* cpe:2.3:a:f5:nginx:0.3.22:::::::* cpe:2.3:a:f5:nginx:0.3.21:::::::* cpe:2.3:a:f5:nginx:0.3.20:::::::* cpe:2.3:a:f5:nginx:0.3.2:::::::* cpe:2.3:a:f5:nginx:0.3.19:::::::* cpe:2.3:a:f5:nginx:0.3.18:::::::* cpe:2.3:a:f5:nginx:0.3.17:::::::* cpe:2.3:a:f5:nginx:0.3.16:::::::* cpe:2.3:a:f5:nginx:0.3.15:::::::* cpe:2.3:a:f5:nginx:0.3.14:::::::* cpe:2.3:a:f5:nginx:0.3.13:::::::* cpe:2.3:a:f5:nginx:0.3.12:::::::* cpe:2.3:a:f5:nginx:0.3.11:::::::* cpe:2.3:a:f5:nginx:0.3.10:::::::* cpe:2.3:a:f5:nginx:0.3.1:::::::* cpe:2.3:a:f5:nginx:0.3.0:::::::* cpe:2.3:a:f5:nginx:0.2.6:::::::* cpe:2.3:a:f5:nginx:0.2.5:::::::* cpe:2.3:a:f5:nginx:0.2.4:::::::* cpe:2.3:a:f5:nginx:0.2.3:::::::* cpe:2.3:a:f5:nginx:0.2.2:::::::* cpe:2.3:a:f5:nginx:0.2.1:::::::* cpe:2.3:a:f5:nginx:0.2.0:::::::* cpe:2.3:a:f5:nginx:0.1.9:::::::* cpe:2.3:a:f5:nginx:0.1.8:::::::* cpe:2.3:a:f5:nginx:0.1.7:::::::* cpe:2.3:a:f5:nginx:0.1.6:::::::* cpe:2.3:a:f5:nginx:0.1.5:::::::* cpe:2.3:a:f5:nginx:0.1.45:::::::* cpe:2.3:a:f5:nginx:0.1.44:::::::* cpe:2.3:a:f5:nginx:0.1.43:::::::* cpe:2.3:a:f5:nginx:0.1.42:::::::* cpe:2.3:a:f5:nginx:0.1.41:::::::* cpe:2.3:a:f5:nginx:0.1.40:::::::* cpe:2.3:a:f5:nginx:0.1.4:::::::* cpe:2.3:a:f5:nginx:0.1.39:::::::* cpe:2.3:a:f5:nginx:0.1.38:::::::* cpe:2.3:a:f5:nginx:0.1.37:::::::* cpe:2.3:a:f5:nginx:0.1.36:::::::* cpe:2.3:a:f5:nginx:0.1.35:::::::* cpe:2.3:a:f5:nginx:0.1.34:::::::* cpe:2.3:a:f5:nginx:0.1.33:::::::* cpe:2.3:a:f5:nginx:0.1.32:::::::* cpe:2.3:a:f5:nginx:0.1.31:::::::* cpe:2.3:a:f5:nginx:0.1.30:::::::* cpe:2.3:a:f5:nginx:0.1.3:::::::* cpe:2.3:a:f5:nginx:0.1.29:::::::* cpe:2.3:a:f5:nginx:0.1.28:::::::* cpe:2.3:a:f5:nginx:0.1.27:::::::* cpe:2.3:a:f5:nginx:0.1.26:::::::* cpe:2.3:a:f5:nginx:0.1.25:::::::* cpe:2.3:a:f5:nginx:0.1.24:::::::* cpe:2.3:a:f5:nginx:0.1.23:::::::* cpe:2.3:a:f5:nginx:0.1.22:::::::* cpe:2.3:a:f5:nginx:0.1.21:::::::* cpe:2.3:a:f5:nginx:0.1.20:::::::* cpe:2.3:a:f5:nginx:0.1.2:::::::* cpe:2.3:a:f5:nginx:0.1.19:::::::* cpe:2.3:a:f5:nginx:0.1.18:::::::* cpe:2.3:a:f5:nginx:0.1.17:::::::* cpe:2.3:a:f5:nginx:0.1.16:::::::* cpe:2.3:a:f5:nginx:0.1.15:::::::* cpe:2.3:a:f5:nginx:0.1.14:::::::* cpe:2.3:a:f5:nginx:0.1.13:::::::* cpe:2.3:a:f5:nginx:0.1.12:::::::* cpe:2.3:a:f5:nginx:0.1.11:::::::* cpe:2.3:a:f5:nginx:0.1.10:::::::* cpe:2.3:a:f5:nginx:0.1.1:::::::* cpe:2.3:a:f5:nginx:0.1.0:::::::* cpe:2.3:a:f5:nginx:r2::::open_source_subscription::: cpe:2.3:a:f5:nginx:r1::::open_source_subscription::: cpe:2.3:a:f5:nginx::::::::	305
Application	Gnu Gnutls cpe:2.3:a:gnu:gnutls:2.8.5:::::::* cpe:2.3:a:gnu:gnutls:2.8.4:::::::* cpe:2.3:a:gnu:gnutls:2.8.3:::::::* cpe:2.3:a:gnu:gnutls:2.8.2:::::::* cpe:2.3:a:gnu:gnutls:2.8.1:::::::* cpe:2.3:a:gnu:gnutls:2.8.0:::::::* cpe:2.3:a:gnu:gnutls:2.7.4:::::::* cpe:2.3:a:gnu:gnutls:2.7.3:::::::* cpe:2.3:a:gnu:gnutls:2.7.2:::::::* cpe:2.3:a:gnu:gnutls:2.7.1:::::::* cpe:2.3:a:gnu:gnutls:2.7.0:::::::* cpe:2.3:a:gnu:gnutls:2.6.6:::::::* cpe:2.3:a:gnu:gnutls:2.6.5:::::::* cpe:2.3:a:gnu:gnutls:2.6.4:::::::* cpe:2.3:a:gnu:gnutls:2.6.3:::::::* cpe:2.3:a:gnu:gnutls:2.6.2:::::::* cpe:2.3:a:gnu:gnutls:2.6.1:::::::* cpe:2.3:a:gnu:gnutls:2.6.0:::::::* cpe:2.3:a:gnu:gnutls:2.5.0:::::::* cpe:2.3:a:gnu:gnutls:2.4.3:::::::* cpe:2.3:a:gnu:gnutls:2.4.2:::::::* cpe:2.3:a:gnu:gnutls:2.4.1:::::::* cpe:2.3:a:gnu:gnutls:2.4.0:::::::* cpe:2.3:a:gnu:gnutls:2.3.9:::::::* cpe:2.3:a:gnu:gnutls:2.3.8:::::::* cpe:2.3:a:gnu:gnutls:2.3.7:::::::* cpe:2.3:a:gnu:gnutls:2.3.6:::::::* cpe:2.3:a:gnu:gnutls:2.3.5:::::::* cpe:2.3:a:gnu:gnutls:2.3.4:::::::* cpe:2.3:a:gnu:gnutls:2.3.3:::::::* cpe:2.3:a:gnu:gnutls:2.3.2:::::::* cpe:2.3:a:gnu:gnutls:2.3.11:::::::* cpe:2.3:a:gnu:gnutls:2.3.10:::::::* cpe:2.3:a:gnu:gnutls:2.3.1:::::::* cpe:2.3:a:gnu:gnutls:2.3.0:::::::* cpe:2.3:a:gnu:gnutls:2.2.5:::::::* cpe:2.3:a:gnu:gnutls:2.2.4:::::::* cpe:2.3:a:gnu:gnutls:2.2.3:::::::* cpe:2.3:a:gnu:gnutls:2.2.2:::::::* cpe:2.3:a:gnu:gnutls:2.2.1:::::::* cpe:2.3:a:gnu:gnutls:2.2.0:::::::* cpe:2.3:a:gnu:gnutls:2.1.8:::::::* cpe:2.3:a:gnu:gnutls:2.1.7:::::::* cpe:2.3:a:gnu:gnutls:2.1.6:::::::* cpe:2.3:a:gnu:gnutls:2.1.5:::::::* cpe:2.3:a:gnu:gnutls:2.1.4:::::::* cpe:2.3:a:gnu:gnutls:2.1.3:::::::* cpe:2.3:a:gnu:gnutls:2.1.2:::::::* cpe:2.3:a:gnu:gnutls:2.1.1:::::::* cpe:2.3:a:gnu:gnutls:2.1.0:::::::* cpe:2.3:a:gnu:gnutls:2.0.4:::::::* cpe:2.3:a:gnu:gnutls:2.0.3:::::::* cpe:2.3:a:gnu:gnutls:2.0.2:::::::* cpe:2.3:a:gnu:gnutls:2.0.1:::::::* cpe:2.3:a:gnu:gnutls:2.0.0:::::::* cpe:2.3:a:gnu:gnutls:1.7.9:::::::* cpe:2.3:a:gnu:gnutls:1.7.8:::::::* cpe:2.3:a:gnu:gnutls:1.7.7:::::::* cpe:2.3:a:gnu:gnutls:1.7.6:::::::* cpe:2.3:a:gnu:gnutls:1.7.5:::::::* cpe:2.3:a:gnu:gnutls:1.7.4:::::::* cpe:2.3:a:gnu:gnutls:1.7.3:::::::* cpe:2.3:a:gnu:gnutls:1.7.2:::::::* cpe:2.3:a:gnu:gnutls:1.7.19:::::::* cpe:2.3:a:gnu:gnutls:1.7.18:::::::* cpe:2.3:a:gnu:gnutls:1.7.17:::::::* cpe:2.3:a:gnu:gnutls:1.7.16:::::::* cpe:2.3:a:gnu:gnutls:1.7.15:::::::* cpe:2.3:a:gnu:gnutls:1.7.14:::::::* cpe:2.3:a:gnu:gnutls:1.7.13:::::::* cpe:2.3:a:gnu:gnutls:1.7.12:::::::* cpe:2.3:a:gnu:gnutls:1.7.11:::::::* cpe:2.3:a:gnu:gnutls:1.7.10:::::::* cpe:2.3:a:gnu:gnutls:1.7.1:::::::* cpe:2.3:a:gnu:gnutls:1.7.0:::::::* cpe:2.3:a:gnu:gnutls:1.6.3:::::::* cpe:2.3:a:gnu:gnutls:1.6.2:::::::* cpe:2.3:a:gnu:gnutls:1.6.1:::::::* cpe:2.3:a:gnu:gnutls:1.6.0:::::::* cpe:2.3:a:gnu:gnutls:1.5.5:::::::* cpe:2.3:a:gnu:gnutls:1.5.4:::::::* cpe:2.3:a:gnu:gnutls:1.5.3:::::::* cpe:2.3:a:gnu:gnutls:1.5.2:::::::* cpe:2.3:a:gnu:gnutls:1.5.1:::::::* cpe:2.3:a:gnu:gnutls:1.5.0:::::::* cpe:2.3:a:gnu:gnutls:1.4.5:::::::* cpe:2.3:a:gnu:gnutls:1.4.4:::::::* cpe:2.3:a:gnu:gnutls:1.4.3:::::::* cpe:2.3:a:gnu:gnutls:1.4.2:::::::* cpe:2.3:a:gnu:gnutls:1.4.1:::::::* cpe:2.3:a:gnu:gnutls:1.4.0:::::::* cpe:2.3:a:gnu:gnutls:1.3.5:::::::* cpe:2.3:a:gnu:gnutls:1.3.4:::::::* cpe:2.3:a:gnu:gnutls:1.3.3:::::::* cpe:2.3:a:gnu:gnutls:1.3.2:::::::* cpe:2.3:a:gnu:gnutls:1.3.1:::::::* cpe:2.3:a:gnu:gnutls:1.3.0:::::::* cpe:2.3:a:gnu:gnutls:1.2.9:::::::* cpe:2.3:a:gnu:gnutls:1.2.8.1a1:::::::* cpe:2.3:a:gnu:gnutls:1.2.8:::::::* cpe:2.3:a:gnu:gnutls:1.2.7:::::::* cpe:2.3:a:gnu:gnutls:1.2.6:::::::* cpe:2.3:a:gnu:gnutls:1.2.5:::::::* cpe:2.3:a:gnu:gnutls:1.2.4:::::::* cpe:2.3:a:gnu:gnutls:1.2.3:::::::* cpe:2.3:a:gnu:gnutls:1.2.2:::::::* cpe:2.3:a:gnu:gnutls:1.2.11:::::::* cpe:2.3:a:gnu:gnutls:1.2.10:::::::* cpe:2.3:a:gnu:gnutls:1.2.1:::::::* cpe:2.3:a:gnu:gnutls:1.2.0:::::::* cpe:2.3:a:gnu:gnutls:1.1.23:::::::* cpe:2.3:a:gnu:gnutls:1.1.22:::::::* cpe:2.3:a:gnu:gnutls:1.1.21:::::::* cpe:2.3:a:gnu:gnutls:1.1.20:::::::* cpe:2.3:a:gnu:gnutls:1.1.19:::::::* cpe:2.3:a:gnu:gnutls:1.1.18:::::::* cpe:2.3:a:gnu:gnutls:1.1.17:::::::* cpe:2.3:a:gnu:gnutls:1.1.16:::::::* cpe:2.3:a:gnu:gnutls:1.1.15:::::::* cpe:2.3:a:gnu:gnutls:1.1.14:::::::* cpe:2.3:a:gnu:gnutls:1.1.13:::::::* cpe:2.3:a:gnu:gnutls:1.0.25:::::::* cpe:2.3:a:gnu:gnutls:1.0.24:::::::* cpe:2.3:a:gnu:gnutls:1.0.23:::::::* cpe:2.3:a:gnu:gnutls:1.0.22:::::::* cpe:2.3:a:gnu:gnutls:1.0.21:::::::* cpe:2.3:a:gnu:gnutls:1.0.20:::::::* cpe:2.3:a:gnu:gnutls:1.0.19:::::::* cpe:2.3:a:gnu:gnutls:1.0.18:::::::* cpe:2.3:a:gnu:gnutls:1.0.17:::::::* cpe:2.3:a:gnu:gnutls:1.0.16:::::::* cpe:2.3:a:gnu:gnutls::::::::	132
Application	Macromedia Flash Player cpe:2.3:a:macromedia:flash_player:5.0.58.0:::::::* cpe:2.3:a:macromedia:flash_player:5.0.42.0:::::::* cpe:2.3:a:macromedia:flash_player:5.0.41.0:::::::* cpe:2.3:a:macromedia:flash_player:5.0.30.0:::::::* cpe:2.3:a:macromedia:flash_player:5.0:::::::*	5
Application	Mozilla Nss cpe:2.3:a:mozilla:nss:3.9.5:::::::* cpe:2.3:a:mozilla:nss:3.9:::::::* cpe:2.3:a:mozilla:nss:3.8:::::::* cpe:2.3:a:mozilla:nss:3.7.7:::::::* cpe:2.3:a:mozilla:nss:3.7.5:::::::* cpe:2.3:a:mozilla:nss:3.7.3:::::::* cpe:2.3:a:mozilla:nss:3.7.2:::::::* cpe:2.3:a:mozilla:nss:3.7.1:::::::* cpe:2.3:a:mozilla:nss:3.7:::::::* cpe:2.3:a:mozilla:nss:3.6.1:::::::* cpe:2.3:a:mozilla:nss:3.6:::::::* cpe:2.3:a:mozilla:nss:3.5:::::::* cpe:2.3:a:mozilla:nss:3.4.3:::::::* cpe:2.3:a:mozilla:nss:3.4.2:::::::* cpe:2.3:a:mozilla:nss:3.4.1:::::::* cpe:2.3:a:mozilla:nss:3.4:::::::* cpe:2.3:a:mozilla:nss:3.3.2:::::::* cpe:2.3:a:mozilla:nss:3.3.1:::::::* cpe:2.3:a:mozilla:nss:3.3:::::::* cpe:2.3:a:mozilla:nss:3.2.1:::::::* cpe:2.3:a:mozilla:nss:3.2:::::::* cpe:2.3:a:mozilla:nss:3.12.4:::::::* cpe:2.3:a:mozilla:nss:3.12.2:::::::* cpe:2.3:a:mozilla:nss:3.12.1:::::::* cpe:2.3:a:mozilla:nss:3.12:::::::* cpe:2.3:a:mozilla:nss:3.11.8:::::::* cpe:2.3:a:mozilla:nss:3.11.7:::::::* cpe:2.3:a:mozilla:nss:3.11.4:::::::* cpe:2.3:a:mozilla:nss:3.11.2:::::::* cpe:2.3:a:mozilla:nss:3.10:::::::* cpe:2.3:a:mozilla:nss:3.0:::::::* cpe:2.3:a:mozilla:nss::::::::	32
Application	Openssl cpe:2.3:a:openssl:openssl:1.0::openvms::::: cpe:2.3:a:openssl:openssl:0.9.8zg:::::::* cpe:2.3:a:openssl:openssl:0.9.8zf:::::::* cpe:2.3:a:openssl:openssl:0.9.8ze:::::::* cpe:2.3:a:openssl:openssl:0.9.8zc:::::::* cpe:2.3:a:openssl:openssl:0.9.8zb:::::::* cpe:2.3:a:openssl:openssl:0.9.8za:::::::* cpe:2.3:a:openssl:openssl:0.9.8z:::::::* cpe:2.3:a:openssl:openssl:0.9.8y:::::::* cpe:2.3:a:openssl:openssl:0.9.8x:::::::* cpe:2.3:a:openssl:openssl:0.9.8w:::::::* cpe:2.3:a:openssl:openssl:0.9.8v:::::::* cpe:2.3:a:openssl:openssl:0.9.8u:::::::* cpe:2.3:a:openssl:openssl:0.9.8t:::::::* cpe:2.3:a:openssl:openssl:0.9.8s:::::::* cpe:2.3:a:openssl:openssl:0.9.8r:::::::* cpe:2.3:a:openssl:openssl:0.9.8q:::::::* cpe:2.3:a:openssl:openssl:0.9.8o:::::::* cpe:2.3:a:openssl:openssl:0.9.8n:::::::* cpe:2.3:a:openssl:openssl:0.9.8m:-:::::: cpe:2.3:a:openssl:openssl:0.9.8m:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.8l:::::::* cpe:2.3:a:openssl:openssl:0.9.8k:::::::* cpe:2.3:a:openssl:openssl:0.9.8j:::::::* cpe:2.3:a:openssl:openssl:0.9.8i:::::::* cpe:2.3:a:openssl:openssl:0.9.8h:::::::* cpe:2.3:a:openssl:openssl:0.9.8g:::::::* cpe:2.3:a:openssl:openssl:0.9.8g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8f:::::::* cpe:2.3:a:openssl:openssl:0.9.8f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8f::::::x86: cpe:2.3:a:openssl:openssl:0.9.8e:::::::* cpe:2.3:a:openssl:openssl:0.9.8e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8e::::::x86: cpe:2.3:a:openssl:openssl:0.9.8d:::::::* cpe:2.3:a:openssl:openssl:0.9.8d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8d::::::x86: cpe:2.3:a:openssl:openssl:0.9.8c:::::::* cpe:2.3:a:openssl:openssl:0.9.8c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.8c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.8c::::::x86: cpe:2.3:a:openssl:openssl:0.9.7m:::::::* cpe:2.3:a:openssl:openssl:0.9.7m::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7m::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7m::::::x86: cpe:2.3:a:openssl:openssl:0.9.7l:::::::* cpe:2.3:a:openssl:openssl:0.9.7l::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7l::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7l::::::x86: cpe:2.3:a:openssl:openssl:0.9.7k:::::::* cpe:2.3:a:openssl:openssl:0.9.7k::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7k::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7k::::::x86: cpe:2.3:a:openssl:openssl:0.9.7j:::::::* cpe:2.3:a:openssl:openssl:0.9.7j::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7j::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7j::::::x86: cpe:2.3:a:openssl:openssl:0.9.7i:::::::* cpe:2.3:a:openssl:openssl:0.9.7i::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7i::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7i::::::x86: cpe:2.3:a:openssl:openssl:0.9.7h:::::::* cpe:2.3:a:openssl:openssl:0.9.7h::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7h::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7h::::::x86: cpe:2.3:a:openssl:openssl:0.9.7g:::::::* cpe:2.3:a:openssl:openssl:0.9.7g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7g::::::x86: cpe:2.3:a:openssl:openssl:0.9.7f:::::::* cpe:2.3:a:openssl:openssl:0.9.7f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7f::::::x86: cpe:2.3:a:openssl:openssl:0.9.7e:::::::* cpe:2.3:a:openssl:openssl:0.9.7e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7e::::::x86: cpe:2.3:a:openssl:openssl:0.9.7d:::::::* cpe:2.3:a:openssl:openssl:0.9.7d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7d::::::x86: cpe:2.3:a:openssl:openssl:0.9.7c:::::::* cpe:2.3:a:openssl:openssl:0.9.7c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7c::::::x86: cpe:2.3:a:openssl:openssl:0.9.7b:::::::* cpe:2.3:a:openssl:openssl:0.9.7b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7b::::::x86: cpe:2.3:a:openssl:openssl:0.9.7a:::::::* cpe:2.3:a:openssl:openssl:0.9.7a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7a::::::x86: cpe:2.3:a:openssl:openssl:0.9.7:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.7:-:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta5:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta6:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta4:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.7:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta4:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta5:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.7:beta6:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta5:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta4:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta6:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.7::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.7::::::x86: cpe:2.3:a:openssl:openssl:0.9.7:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta4:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta5:::::x86:* cpe:2.3:a:openssl:openssl:0.9.7:beta6:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6m:::::::* cpe:2.3:a:openssl:openssl:0.9.6m::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6m::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6m::::::x86: cpe:2.3:a:openssl:openssl:0.9.6l:::::::* cpe:2.3:a:openssl:openssl:0.9.6l::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6l::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6l::::::x86: cpe:2.3:a:openssl:openssl:0.9.6k:::::::* cpe:2.3:a:openssl:openssl:0.9.6k::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6k::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6k::::::x86: cpe:2.3:a:openssl:openssl:0.9.6j:::::::* cpe:2.3:a:openssl:openssl:0.9.6j::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6j::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6j::::::x86: cpe:2.3:a:openssl:openssl:0.9.6i:::::::* cpe:2.3:a:openssl:openssl:0.9.6i::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6i::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6i::::::x86: cpe:2.3:a:openssl:openssl:0.9.6h:::::::* cpe:2.3:a:openssl:openssl:0.9.6h:bogus:::::: cpe:2.3:a:openssl:openssl:0.9.6h::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6h::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6h::::::x86: cpe:2.3:a:openssl:openssl:0.9.6g:::::::* cpe:2.3:a:openssl:openssl:0.9.6g::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6g::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6g::::::x86: cpe:2.3:a:openssl:openssl:0.9.6f:::::::* cpe:2.3:a:openssl:openssl:0.9.6f::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6f::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6f::::::x86: cpe:2.3:a:openssl:openssl:0.9.6e:::::::* cpe:2.3:a:openssl:openssl:0.9.6e::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6e::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6e::::::x86: cpe:2.3:a:openssl:openssl:0.9.6d:-:::::: cpe:2.3:a:openssl:openssl:0.9.6d::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6d::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6d::::::x86: cpe:2.3:a:openssl:openssl:0.9.6c:::::::* cpe:2.3:a:openssl:openssl:0.9.6c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6c::::::x86: cpe:2.3:a:openssl:openssl:0.9.6b:::::::* cpe:2.3:a:openssl:openssl:0.9.6b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6b::::::x86: cpe:2.3:a:openssl:openssl:0.9.6a:-:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6a:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6a::::::x86: cpe:2.3:a:openssl:openssl:0.9.6a:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6a:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6a:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.6:-:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta3:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.6:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.6:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta3:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta3:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.6::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.6::::::x86: cpe:2.3:a:openssl:openssl:0.9.6:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.6:beta3:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.5a:-:::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5a::::::x86: cpe:2.3:a:openssl:openssl:0.9.5a:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5a:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5:beta1:::::: cpe:2.3:a:openssl:openssl:0.9.5:-:::::: cpe:2.3:a:openssl:openssl:0.9.5:beta2:::::: cpe:2.3:a:openssl:openssl:0.9.5:beta2:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5:beta1:%7E%7E%7E%7Ex86%7E:::::* cpe:2.3:a:openssl:openssl:0.9.5::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.5:beta1:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5:beta2:~~~~x86~:::::* cpe:2.3:a:openssl:openssl:0.9.5::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.5::::::x86: cpe:2.3:a:openssl:openssl:0.9.5:beta1:::::x86:* cpe:2.3:a:openssl:openssl:0.9.5:beta2:::::x86:* cpe:2.3:a:openssl:openssl:0.9.4:::::::* cpe:2.3:a:openssl:openssl:0.9.4::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.4::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.4::::::x86: cpe:2.3:a:openssl:openssl:0.9.3a:::::::* cpe:2.3:a:openssl:openssl:0.9.3a::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.3a::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.3a::::::x86: cpe:2.3:a:openssl:openssl:0.9.3:-:::::: cpe:2.3:a:openssl:openssl:0.9.3::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.3::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.3::::::x86: cpe:2.3:a:openssl:openssl:0.9.2b:::::::* cpe:2.3:a:openssl:openssl:0.9.2b::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.2b::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.2b::::::x86: cpe:2.3:a:openssl:openssl:0.9.1c:::::::* cpe:2.3:a:openssl:openssl:0.9.1c::%7E%7E%7E%7Ex86%7E::::: cpe:2.3:a:openssl:openssl:0.9.1c::~~~~x86~::::: cpe:2.3:a:openssl:openssl:0.9.1c::::::x86: cpe:2.3:a:openssl:openssl:0.9.1b:::::::* cpe:2.3:a:openssl:openssl:0.9.0b:::::::* cpe:2.3:a:openssl:openssl:::::::: cpe:2.3:a:openssl:openssl:::openvms:::::* cpe:2.3:a:openssl:openssl:-:::::::*	255
Application	Oracle Jre cpe:2.3:a:oracle:jre:1.6.0:update18:::::: cpe:2.3:a:oracle:jre:1.5.0:update23:::::: cpe:2.3:a:oracle:jre:1.4.2_25:::::::*	3
Application	Sun Jdk cpe:2.3:a:sun:jdk:1.6.0:update_4:::::: cpe:2.3:a:sun:jdk:1.6.0:update_18:::::: cpe:2.3:a:sun:jdk:1.6.0:update1:::::: cpe:2.3:a:sun:jdk:1.6.0:update1_b06:::::: cpe:2.3:a:sun:jdk:1.6.0:update2:::::: cpe:2.3:a:sun:jdk:1.6.0:update_14:::::: cpe:2.3:a:sun:jdk:1.6.0:update_10:::::: cpe:2.3:a:sun:jdk:1.6.0:update_7:::::: cpe:2.3:a:sun:jdk:1.6.0:update_17:::::: cpe:2.3:a:sun:jdk:1.6.0:update_13:::::: cpe:2.3:a:sun:jdk:1.6.0:update_6:::::: cpe:2.3:a:sun:jdk:1.6.0:update_20:::::: cpe:2.3:a:sun:jdk:1.6.0:update_5:::::: cpe:2.3:a:sun:jdk:1.6.0:update_16:::::: cpe:2.3:a:sun:jdk:1.6.0:update_3:::::: cpe:2.3:a:sun:jdk:1.6.0:update_19:::::: cpe:2.3:a:sun:jdk:1.6.0:update_15:::::: cpe:2.3:a:sun:jdk:1.6.0:update_21:::::: cpe:2.3:a:sun:jdk:1.6.0:update_12:::::: cpe:2.3:a:sun:jdk:1.6.0:update_11:::::: cpe:2.3:a:sun:jdk:1.6.0:update9:::::: cpe:2.3:a:sun:jdk:1.6.0:update10:::::: cpe:2.3:a:sun:jdk:1.6.0:update14:::::: cpe:2.3:a:sun:jdk:1.6.0:update6:::::: cpe:2.3:a:sun:jdk:1.6.0:update11:::::: cpe:2.3:a:sun:jdk:1.6.0:update3:::::: cpe:2.3:a:sun:jdk:1.6.0:update5:::::: cpe:2.3:a:sun:jdk:1.6.0:update13:::::: cpe:2.3:a:sun:jdk:1.6.0:update12:::::: cpe:2.3:a:sun:jdk:1.6.0:update4:::::: cpe:2.3:a:sun:jdk:1.6.0:update15:::::: cpe:2.3:a:sun:jdk:1.6.0:update7:::::: cpe:2.3:a:sun:jdk:1.6.0:update8:::::: cpe:2.3:a:sun:jdk:1.6.0:update16:::::: cpe:2.3:a:sun:jdk:1.6.0:update_8:::::: cpe:2.3:a:sun:jdk:1.6.0:update_1:::::: cpe:2.3:a:sun:jdk:1.6.0:update_9:::::: cpe:2.3:a:sun:jdk:1.6.0:update18:::::: cpe:2.3:a:sun:jdk:1.6.0:update17:::::: cpe:2.3:a:sun:jdk:1.6.0:update19:::::: cpe:2.3:a:sun:jdk:1.6.0:update_22:::::: cpe:2.3:a:sun:jdk:1.6.0:update_23:::::: cpe:2.3:a:sun:jdk:1.6.0:update_25:::::: cpe:2.3:a:sun:jdk:1.6.0:update_24:::::: cpe:2.3:a:sun:jdk:1.6.0:update_26:::::: cpe:2.3:a:sun:jdk:1.6.0:update_27:::::: cpe:2.3:a:sun:jdk:1.6.0:update_20:x64:::::* cpe:2.3:a:sun:jdk:1.6.0:-:::::: cpe:2.3:a:sun:jdk:1.6:::::::* cpe:2.3:a:sun:jdk:1.5.0_03::solaris::::: cpe:2.3:a:sun:jdk:1.5.0_03::windows::::: cpe:2.3:a:sun:jdk:1.5.0_03::linux::::: cpe:2.3:a:sun:jdk:1.5.0:update25:::::: cpe:2.3:a:sun:jdk:1.5.0:update10:::::: cpe:2.3:a:sun:jdk:1.5.0:update5:::::: cpe:2.3:a:sun:jdk:1.5.0:update7:::::: cpe:2.3:a:sun:jdk:1.5.0:update6:::::: cpe:2.3:a:sun:jdk:1.5.0:update3:::::: cpe:2.3:a:sun:jdk:1.5.0:update16:::::: cpe:2.3:a:sun:jdk:1.5.0:update4:::::: cpe:2.3:a:sun:jdk:1.5.0:update17:::::: cpe:2.3:a:sun:jdk:1.5.0:update9:::::: cpe:2.3:a:sun:jdk:1.5.0:update19:::::: cpe:2.3:a:sun:jdk:1.5.0:update15:::::: cpe:2.3:a:sun:jdk:1.5.0:update21:::::: cpe:2.3:a:sun:jdk:1.5.0:update2:::::: cpe:2.3:a:sun:jdk:1.5.0:update12:::::: cpe:2.3:a:sun:jdk:1.5.0:update23:::::: cpe:2.3:a:sun:jdk:1.5.0:update8:::::: cpe:2.3:a:sun:jdk:1.5.0:update18:::::: cpe:2.3:a:sun:jdk:1.5.0:update11:::::: cpe:2.3:a:sun:jdk:1.5.0:update24:::::: cpe:2.3:a:sun:jdk:1.5.0:update22:::::: cpe:2.3:a:sun:jdk:1.5.0:update20:::::: cpe:2.3:a:sun:jdk:1.5.0:update14:::::: cpe:2.3:a:sun:jdk:1.5.0:update13:::::: cpe:2.3:a:sun:jdk:1.5.0:update1:::::: cpe:2.3:a:sun:jdk:1.5.0:update_1:::::: cpe:2.3:a:sun:jdk:1.5.0:update_16:::::: cpe:2.3:a:sun:jdk:1.5.0:update11_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update_10:::::: cpe:2.3:a:sun:jdk:1.5.0:update_4:::::: cpe:2.3:a:sun:jdk:1.5.0:update_9:::::: cpe:2.3:a:sun:jdk:1.5.0:update_14:::::: cpe:2.3:a:sun:jdk:1.5.0:update_20:::::: cpe:2.3:a:sun:jdk:1.5.0:update_21:::::: cpe:2.3:a:sun:jdk:1.5.0:update_7:::::: cpe:2.3:a:sun:jdk:1.5.0:update_18:::::: cpe:2.3:a:sun:jdk:1.5.0:update_6:::::: cpe:2.3:a:sun:jdk:1.5.0:update7_b03:::::: cpe:2.3:a:sun:jdk:1.5.0:update_12:::::: cpe:2.3:a:sun:jdk:1.5.0:update_2:::::: cpe:2.3:a:sun:jdk:1.5.0:update_13:::::: cpe:2.3:a:sun:jdk:1.5.0:update_3:::::: cpe:2.3:a:sun:jdk:1.5.0:update_15:::::: cpe:2.3:a:sun:jdk:1.5.0:update_17:::::: cpe:2.3:a:sun:jdk:1.5.0:update_19:::::: cpe:2.3:a:sun:jdk:1.5.0:update_5:::::: cpe:2.3:a:sun:jdk:1.5.0:update_22:::::: cpe:2.3:a:sun:jdk:1.5.0:update_8:::::: cpe:2.3:a:sun:jdk:1.5.0:update_11:::::: cpe:2.3:a:sun:jdk:1.5.0:update26:::::: cpe:2.3:a:sun:jdk:1.5.0:update27:::::: cpe:2.3:a:sun:jdk:1.5.0:update35:::::: cpe:2.3:a:sun:jdk:1.5.0:update29:::::: cpe:2.3:a:sun:jdk:1.5.0:update33:::::: cpe:2.3:a:sun:jdk:1.5.0:update31:::::: cpe:2.3:a:sun:jdk:1.5.0:update28:::::: cpe:2.3:a:sun:jdk:1.5.0:-:::::: cpe:2.3:a:sun:jdk:1.4.2_9:::::::* cpe:2.3:a:sun:jdk:1.4.2_8:::::::* cpe:2.3:a:sun:jdk:1.4.2_7:::::::* cpe:2.3:a:sun:jdk:1.4.2_6:::::::* cpe:2.3:a:sun:jdk:1.4.2_5:::::::* cpe:2.3:a:sun:jdk:1.4.2_4:::::::* cpe:2.3:a:sun:jdk:1.4.2_37:::::::* cpe:2.3:a:sun:jdk:1.4.2_36:::::::* cpe:2.3:a:sun:jdk:1.4.2_35:::::::* cpe:2.3:a:sun:jdk:1.4.2_34:::::::* cpe:2.3:a:sun:jdk:1.4.2_33:::::::* cpe:2.3:a:sun:jdk:1.4.2_32:::::::* cpe:2.3:a:sun:jdk:1.4.2_31:::::::* cpe:2.3:a:sun:jdk:1.4.2_30:::::::* cpe:2.3:a:sun:jdk:1.4.2_3:::::::* cpe:2.3:a:sun:jdk:1.4.2_29:::::::* cpe:2.3:a:sun:jdk:1.4.2_28:::::::* cpe:2.3:a:sun:jdk:1.4.2_27:::::::* cpe:2.3:a:sun:jdk:1.4.2_26:::::::* cpe:2.3:a:sun:jdk:1.4.2_25:::::::* cpe:2.3:a:sun:jdk:1.4.2_24:::::::* cpe:2.3:a:sun:jdk:1.4.2_24::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_23:::::::* cpe:2.3:a:sun:jdk:1.4.2_22:::::::* cpe:2.3:a:sun:jdk:1.4.2_21:::::::* cpe:2.3:a:sun:jdk:1.4.2_20:::::::* cpe:2.3:a:sun:jdk:1.4.2_2:::::::* cpe:2.3:a:sun:jdk:1.4.2_19:::::::* cpe:2.3:a:sun:jdk:1.4.2_18:::::::* cpe:2.3:a:sun:jdk:1.4.2_17:::::::* cpe:2.3:a:sun:jdk:1.4.2_16:::::::* cpe:2.3:a:sun:jdk:1.4.2_15:::::::* cpe:2.3:a:sun:jdk:1.4.2_14:::::::* cpe:2.3:a:sun:jdk:1.4.2_13:::::::* cpe:2.3:a:sun:jdk:1.4.2_12:::::::* cpe:2.3:a:sun:jdk:1.4.2_11:::::::* cpe:2.3:a:sun:jdk:1.4.2_10:::::::* cpe:2.3:a:sun:jdk:1.4.2_1:::::::* cpe:2.3:a:sun:jdk:1.4.2_08::windows::::: cpe:2.3:a:sun:jdk:1.4.2_08::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_08::linux::::: cpe:2.3:a:sun:jdk:1.4.2_05::windows::::: cpe:2.3:a:sun:jdk:1.4.2_05::linux::::: cpe:2.3:a:sun:jdk:1.4.2_05::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_04::linux::::: cpe:2.3:a:sun:jdk:1.4.2_04::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_04::windows::::: cpe:2.3:a:sun:jdk:1.4.2_03::windows::::: cpe:2.3:a:sun:jdk:1.4.2_03::linux::::: cpe:2.3:a:sun:jdk:1.4.2_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.2_02::linux::::: cpe:2.3:a:sun:jdk:1.4.2_01::linux::::: cpe:2.3:a:sun:jdk:1.4.2::solaris::::: cpe:2.3:a:sun:jdk:1.4.2::windows::::: cpe:2.3:a:sun:jdk:1.4.2::linux::::: cpe:2.3:a:sun:jdk:1.4.2:-:::::: cpe:2.3:a:sun:jdk:1.4.1_07:::::::* cpe:2.3:a:sun:jdk:1.4.1_06:::::::* cpe:2.3:a:sun:jdk:1.4.1_05:::::::* cpe:2.3:a:sun:jdk:1.4.1_04:::::::* cpe:2.3:a:sun:jdk:1.4.1_03:::::::* cpe:2.3:a:sun:jdk:1.4.1_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_03::windows::::: cpe:2.3:a:sun:jdk:1.4.1_03::linux::::: cpe:2.3:a:sun:jdk:1.4.1_02:::::::* cpe:2.3:a:sun:jdk:1.4.1_02::windows::::: cpe:2.3:a:sun:jdk:1.4.1_02::linux::::: cpe:2.3:a:sun:jdk:1.4.1_02::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_01:::::::* cpe:2.3:a:sun:jdk:1.4.1_01::linux::::: cpe:2.3:a:sun:jdk:1.4.1_01::solaris::::: cpe:2.3:a:sun:jdk:1.4.1_01::windows::::: cpe:2.3:a:sun:jdk:1.4.1:::::::* cpe:2.3:a:sun:jdk:1.4.1::windows::::: cpe:2.3:a:sun:jdk:1.4.1::solaris::::: cpe:2.3:a:sun:jdk:1.4.1::linux::::: cpe:2.3:a:sun:jdk:1.4.0_4::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_4::windows::::: cpe:2.3:a:sun:jdk:1.4.0_4::linux::::: cpe:2.3:a:sun:jdk:1.4.0_04:::::::* cpe:2.3:a:sun:jdk:1.4.0_03:::::::* cpe:2.3:a:sun:jdk:1.4.0_03::linux::::: cpe:2.3:a:sun:jdk:1.4.0_03::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_03::windows::::: cpe:2.3:a:sun:jdk:1.4.0_02:::::::* cpe:2.3:a:sun:jdk:1.4.0_02::linux::::: cpe:2.3:a:sun:jdk:1.4.0_02::solaris::::: cpe:2.3:a:sun:jdk:1.4.0_02::windows::::: cpe:2.3:a:sun:jdk:1.4.0_01:::::::* cpe:2.3:a:sun:jdk:1.4.0_01::windows::::: cpe:2.3:a:sun:jdk:1.4.0:-:::::: cpe:2.3:a:sun:jdk:1.4::linux::::: cpe:2.3:a:sun:jdk:1.4::windows::::: cpe:2.3:a:sun:jdk:1.4::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_28:::::::* cpe:2.3:a:sun:jdk:1.3.1_27:::::::* cpe:2.3:a:sun:jdk:1.3.1_26:::::::* cpe:2.3:a:sun:jdk:1.3.1_25:::::::* cpe:2.3:a:sun:jdk:1.3.1_24:::::::* cpe:2.3:a:sun:jdk:1.3.1_23:::::::* cpe:2.3:a:sun:jdk:1.3.1_22:::::::* cpe:2.3:a:sun:jdk:1.3.1_21:::::::* cpe:2.3:a:sun:jdk:1.3.1_20:::::::* cpe:2.3:a:sun:jdk:1.3.1_19:::::::* cpe:2.3:a:sun:jdk:1.3.1_18:::::::* cpe:2.3:a:sun:jdk:1.3.1_17:::::::* cpe:2.3:a:sun:jdk:1.3.1_16:::::::* cpe:2.3:a:sun:jdk:1.3.1_15:::::::* cpe:2.3:a:sun:jdk:1.3.1_15::linux::::: cpe:2.3:a:sun:jdk:1.3.1_15::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_15::windows::::: cpe:2.3:a:sun:jdk:1.3.1_14:::::::* cpe:2.3:a:sun:jdk:1.3.1_14::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_14::windows::::: cpe:2.3:a:sun:jdk:1.3.1_14::linux::::: cpe:2.3:a:sun:jdk:1.3.1_13:::::::* cpe:2.3:a:sun:jdk:1.3.1_13::windows::::: cpe:2.3:a:sun:jdk:1.3.1_13::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_13::linux::::: cpe:2.3:a:sun:jdk:1.3.1_12:::::::* cpe:2.3:a:sun:jdk:1.3.1_12::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_12::windows::::: cpe:2.3:a:sun:jdk:1.3.1_12::linux::::: cpe:2.3:a:sun:jdk:1.3.1_11:::::::* cpe:2.3:a:sun:jdk:1.3.1_11::linux::::: cpe:2.3:a:sun:jdk:1.3.1_11::windows::::: cpe:2.3:a:sun:jdk:1.3.1_11::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_10:::::::* cpe:2.3:a:sun:jdk:1.3.1_10::linux::::: cpe:2.3:a:sun:jdk:1.3.1_10::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_10::windows::::: cpe:2.3:a:sun:jdk:1.3.1_09:::::::* cpe:2.3:a:sun:jdk:1.3.1_09::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_09::linux::::: cpe:2.3:a:sun:jdk:1.3.1_09::windows::::: cpe:2.3:a:sun:jdk:1.3.1_08:::::::* cpe:2.3:a:sun:jdk:1.3.1_08::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_08::windows::::: cpe:2.3:a:sun:jdk:1.3.1_08::linux::::: cpe:2.3:a:sun:jdk:1.3.1_07:::::::* cpe:2.3:a:sun:jdk:1.3.1_07::windows::::: cpe:2.3:a:sun:jdk:1.3.1_07::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_07::linux::::: cpe:2.3:a:sun:jdk:1.3.1_06:::::::* cpe:2.3:a:sun:jdk:1.3.1_06::windows::::: cpe:2.3:a:sun:jdk:1.3.1_06::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_06::linux::::: cpe:2.3:a:sun:jdk:1.3.1_05:::::::* cpe:2.3:a:sun:jdk:1.3.1_05::linux::::: cpe:2.3:a:sun:jdk:1.3.1_05::windows::::: cpe:2.3:a:sun:jdk:1.3.1_05::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_04:::::::* cpe:2.3:a:sun:jdk:1.3.1_04::windows::::: cpe:2.3:a:sun:jdk:1.3.1_03:::::::* cpe:2.3:a:sun:jdk:1.3.1_03::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_03::windows::::: cpe:2.3:a:sun:jdk:1.3.1_03::linux::::: cpe:2.3:a:sun:jdk:1.3.1_02:::::::* cpe:2.3:a:sun:jdk:1.3.1_02::windows::::: cpe:2.3:a:sun:jdk:1.3.1_02::linux::::: cpe:2.3:a:sun:jdk:1.3.1_02::solaris::::: cpe:2.3:a:sun:jdk:1.3.1_01a:::::::* cpe:2.3:a:sun:jdk:1.3.1_01a::windows::::: cpe:2.3:a:sun:jdk:1.3.1_01:::::::* cpe:2.3:a:sun:jdk:1.3.1_01::linux::::: cpe:2.3:a:sun:jdk:1.3.1_01::solaris::::: cpe:2.3:a:sun:jdk:1.3.1:update19:::::: cpe:2.3:a:sun:jdk:1.3.1:update20:::::: cpe:2.3:a:sun:jdk:1.3.1:-:::::: cpe:2.3:a:sun:jdk:1.3.0_05:::::::* cpe:2.3:a:sun:jdk:1.3.0_05::linux::::: cpe:2.3:a:sun:jdk:1.3.0_05::windows::::: cpe:2.3:a:sun:jdk:1.3.0_05::solaris::::: cpe:2.3:a:sun:jdk:1.3.0_04:::::::* cpe:2.3:a:sun:jdk:1.3.0_03:::::::* cpe:2.3:a:sun:jdk:1.3.0_02:::::::* cpe:2.3:a:sun:jdk:1.3.0_02::windows::::: cpe:2.3:a:sun:jdk:1.3.0_02::solaris::::: cpe:2.3:a:sun:jdk:1.3.0_02::linux::::: cpe:2.3:a:sun:jdk:1.3.0_01:::::::* cpe:2.3:a:sun:jdk:1.3.0:::::::* cpe:2.3:a:sun:jdk:1.3_05::solaris::::: cpe:2.3:a:sun:jdk:1.3_02::solaris::::: cpe:2.3:a:sun:jdk:1.3::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_12::windows::::: cpe:2.3:a:sun:jdk:1.2.2_11::linux::::: cpe:2.3:a:sun:jdk:1.2.2_11::windows::::: cpe:2.3:a:sun:jdk:1.2.2_11::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_10::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_10::windows::::: cpe:2.3:a:sun:jdk:1.2.2_10::linux::::: cpe:2.3:a:sun:jdk:1.2.2_07a::solaris::::: cpe:2.3:a:sun:jdk:1.2.2_07::windows::::: cpe:2.3:a:sun:jdk:1.2.2_07::linux::::: cpe:2.3:a:sun:jdk:1.2.2_07::solaris::::: cpe:2.3:a:sun:jdk:1.2.2:update4:::::: cpe:2.3:a:sun:jdk:1.2.2:update5:::::: cpe:2.3:a:sun:jdk:1.2.2::solaris::::: cpe:2.3:a:sun:jdk:1.2.1:update3:::::: cpe:2.3:a:sun:jdk:1.2.1:-:::::: cpe:2.3:a:sun:jdk:1.2.0:::::::* cpe:2.3:a:sun:jdk:1.1.8:update13:::::: cpe:2.3:a:sun:jdk:1.1.8:update14:::::: cpe:2.3:a:sun:jdk:1.1.8:update2:::::: cpe:2.3:a:sun:jdk:1.1.8:update8:::::: cpe:2.3:a:sun:jdk:1.1.8:update10:::::: cpe:2.3:a:sun:jdk:1.1.8:update7:::::: cpe:2.3:a:sun:jdk:1.1.7b:update5:::::: cpe:2.3:a:sun:jdk:1.1.7b:-:::::: cpe:2.3:a:sun:jdk:1.1.6:update7:::::: cpe:2.3:a:sun:jdk:1.1.6:-:::::: cpe:2.3:a:sun:jdk:1.1.0:::::::*	321
Application	Sun Jre cpe:2.3:a:sun:jre:1.6.0:update_4:::::: cpe:2.3:a:sun:jre:1.6.0:update_16:::::: cpe:2.3:a:sun:jre:1.6.0:update_14:::::: cpe:2.3:a:sun:jre:1.6.0:update_10:::::: cpe:2.3:a:sun:jre:1.6.0:update_20:::::: cpe:2.3:a:sun:jre:1.6.0:update_18:::::: cpe:2.3:a:sun:jre:1.6.0:update_11:::::: cpe:2.3:a:sun:jre:1.6.0:update_13:::::: cpe:2.3:a:sun:jre:1.6.0:update_6:::::: cpe:2.3:a:sun:jre:1.6.0:update_1:::::: cpe:2.3:a:sun:jre:1.6.0:update_17:::::: cpe:2.3:a:sun:jre:1.6.0:update_7:::::: cpe:2.3:a:sun:jre:1.6.0:update_12:::::: cpe:2.3:a:sun:jre:1.6.0:update_15:::::: cpe:2.3:a:sun:jre:1.6.0:update_3:::::: cpe:2.3:a:sun:jre:1.6.0:update_2:::::: cpe:2.3:a:sun:jre:1.6.0:update_21:::::: cpe:2.3:a:sun:jre:1.6.0:update_5:::::: cpe:2.3:a:sun:jre:1.6.0:update_19:::::: cpe:2.3:a:sun:jre:1.6.0:update11:::::: cpe:2.3:a:sun:jre:1.6.0:update15:::::: cpe:2.3:a:sun:jre:1.6.0:update16:::::: cpe:2.3:a:sun:jre:1.6.0:update5:::::: cpe:2.3:a:sun:jre:1.6.0:update10:::::: cpe:2.3:a:sun:jre:1.6.0:update9:::::: cpe:2.3:a:sun:jre:1.6.0:update8:::::: cpe:2.3:a:sun:jre:1.6.0:update14:::::: cpe:2.3:a:sun:jre:1.6.0:update7:::::: cpe:2.3:a:sun:jre:1.6.0:update12:::::: cpe:2.3:a:sun:jre:1.6.0:update6:::::: cpe:2.3:a:sun:jre:1.6.0:update13:::::: cpe:2.3:a:sun:jre:1.6.0:update4:::::: cpe:2.3:a:sun:jre:1.6.0:update_8:::::: cpe:2.3:a:sun:jre:1.6.0:update_9:::::: cpe:2.3:a:sun:jre:1.6.0:update17:::::: cpe:2.3:a:sun:jre:1.6.0:update19:::::: cpe:2.3:a:sun:jre:1.6.0:update18:::::: cpe:2.3:a:sun:jre:1.6.0:update_22:::::: cpe:2.3:a:sun:jre:1.6.0:update_23:::::: cpe:2.3:a:sun:jre:1.6.0:update_25:::::: cpe:2.3:a:sun:jre:1.6.0:update_24:::::: cpe:2.3:a:sun:jre:1.6.0:update_26:::::: cpe:2.3:a:sun:jre:1.6.0:update_27:::::: cpe:2.3:a:sun:jre:1.6.0:-:::::: cpe:2.3:a:sun:jre:1.5.0_11-b03:::::::* cpe:2.3:a:sun:jre:1.5.0:update16:::::: cpe:2.3:a:sun:jre:1.5.0:update17:::::: cpe:2.3:a:sun:jre:1.5.0:update15:::::: cpe:2.3:a:sun:jre:1.5.0:update22:::::: cpe:2.3:a:sun:jre:1.5.0:update12:::::: cpe:2.3:a:sun:jre:1.5.0:update10:::::: cpe:2.3:a:sun:jre:1.5.0:update6:::::: cpe:2.3:a:sun:jre:1.5.0:update13:::::: cpe:2.3:a:sun:jre:1.5.0:update14:::::: cpe:2.3:a:sun:jre:1.5.0:update24:::::: cpe:2.3:a:sun:jre:1.5.0:update11:::::: cpe:2.3:a:sun:jre:1.5.0:update18:::::: cpe:2.3:a:sun:jre:1.5.0:update8:::::: cpe:2.3:a:sun:jre:1.5.0:update1:::::: cpe:2.3:a:sun:jre:1.5.0:update9:::::: cpe:2.3:a:sun:jre:1.5.0:update21:::::: cpe:2.3:a:sun:jre:1.5.0:update20:::::: cpe:2.3:a:sun:jre:1.5.0:update3:::::: cpe:2.3:a:sun:jre:1.5.0:update25:::::: cpe:2.3:a:sun:jre:1.5.0:update4:::::: cpe:2.3:a:sun:jre:1.5.0:update5:::::: cpe:2.3:a:sun:jre:1.5.0:update2:::::: cpe:2.3:a:sun:jre:1.5.0:update7:::::: cpe:2.3:a:sun:jre:1.5.0:update23:::::: cpe:2.3:a:sun:jre:1.5.0:update19:::::: cpe:2.3:a:sun:jre:1.5.0:update_6:::::: cpe:2.3:a:sun:jre:1.5.0:update_7:::::: cpe:2.3:a:sun:jre:1.5.0:update_15:::::: cpe:2.3:a:sun:jre:1.5.0:update_1:::::: cpe:2.3:a:sun:jre:1.5.0:update_3:::::: cpe:2.3:a:sun:jre:1.5.0:update_8:::::: cpe:2.3:a:sun:jre:1.5.0:update_17:::::: cpe:2.3:a:sun:jre:1.5.0:update_2:::::: cpe:2.3:a:sun:jre:1.5.0:update_18:::::: cpe:2.3:a:sun:jre:1.5.0:update_12:::::: cpe:2.3:a:sun:jre:1.5.0:update_9:::::: cpe:2.3:a:sun:jre:1.5.0:update_21:::::: cpe:2.3:a:sun:jre:1.5.0:update_19:::::: cpe:2.3:a:sun:jre:1.5.0:update_14:::::: cpe:2.3:a:sun:jre:1.5.0:update_16:::::: cpe:2.3:a:sun:jre:1.5.0:update_4:::::: cpe:2.3:a:sun:jre:1.5.0:update_13:::::: cpe:2.3:a:sun:jre:1.5.0:update_20:::::: cpe:2.3:a:sun:jre:1.5.0:update_5:::::: cpe:2.3:a:sun:jre:1.5.0:update_11:::::: cpe:2.3:a:sun:jre:1.5.0:update27:::::: cpe:2.3:a:sun:jre:1.5.0:update26:::::: cpe:2.3:a:sun:jre:1.5.0:update35:::::: cpe:2.3:a:sun:jre:1.5.0:update28:::::: cpe:2.3:a:sun:jre:1.5.0:update31:::::: cpe:2.3:a:sun:jre:1.5.0:update33:::::: cpe:2.3:a:sun:jre:1.5.0:update29:::::: cpe:2.3:a:sun:jre:1.5.0:-:::::: cpe:2.3:a:sun:jre:1.4.2_9:::::::* cpe:2.3:a:sun:jre:1.4.2_8:::::::* cpe:2.3:a:sun:jre:1.4.2_7:::::::* cpe:2.3:a:sun:jre:1.4.2_6:::::::* cpe:2.3:a:sun:jre:1.4.2_5:::::::* cpe:2.3:a:sun:jre:1.4.2_4:::::::* cpe:2.3:a:sun:jre:1.4.2_37:::::::* cpe:2.3:a:sun:jre:1.4.2_36:::::::* cpe:2.3:a:sun:jre:1.4.2_35:::::::* cpe:2.3:a:sun:jre:1.4.2_34:::::::* cpe:2.3:a:sun:jre:1.4.2_33:::::::* cpe:2.3:a:sun:jre:1.4.2_32:::::::* cpe:2.3:a:sun:jre:1.4.2_31:::::::* cpe:2.3:a:sun:jre:1.4.2_30:::::::* cpe:2.3:a:sun:jre:1.4.2_3:::::::* cpe:2.3:a:sun:jre:1.4.2_29:::::::* cpe:2.3:a:sun:jre:1.4.2_28:::::::* cpe:2.3:a:sun:jre:1.4.2_27:::::::* cpe:2.3:a:sun:jre:1.4.2_26:::::::* cpe:2.3:a:sun:jre:1.4.2_25:::::::* cpe:2.3:a:sun:jre:1.4.2_24:::::::* cpe:2.3:a:sun:jre:1.4.2_23:::::::* cpe:2.3:a:sun:jre:1.4.2_22:::::::* cpe:2.3:a:sun:jre:1.4.2_21:::::::* cpe:2.3:a:sun:jre:1.4.2_20:::::::* cpe:2.3:a:sun:jre:1.4.2_2:::::::* cpe:2.3:a:sun:jre:1.4.2_19:::::::* cpe:2.3:a:sun:jre:1.4.2_18:::::::* cpe:2.3:a:sun:jre:1.4.2_17:::::::* cpe:2.3:a:sun:jre:1.4.2_16:::::::* cpe:2.3:a:sun:jre:1.4.2_15:::::::* cpe:2.3:a:sun:jre:1.4.2_14:::::::* cpe:2.3:a:sun:jre:1.4.2_13:::::::* cpe:2.3:a:sun:jre:1.4.2_12:::::::* cpe:2.3:a:sun:jre:1.4.2_11:::::::* cpe:2.3:a:sun:jre:1.4.2_10:::::::* cpe:2.3:a:sun:jre:1.4.2_1:::::::* cpe:2.3:a:sun:jre:1.4.2_09:::::::* cpe:2.3:a:sun:jre:1.4.2_08:::::::* cpe:2.3:a:sun:jre:1.4.2_07:::::::* cpe:2.3:a:sun:jre:1.4.2_06:::::::* cpe:2.3:a:sun:jre:1.4.2_05:::::::* cpe:2.3:a:sun:jre:1.4.2_04:::::::* cpe:2.3:a:sun:jre:1.4.2_03:::::::* cpe:2.3:a:sun:jre:1.4.2_02:::::::* cpe:2.3:a:sun:jre:1.4.2_01:::::::* cpe:2.3:a:sun:jre:1.4.2:update1:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update4:linux:::::* cpe:2.3:a:sun:jre:1.4.2::solaris::::: cpe:2.3:a:sun:jre:1.4.2:update2:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update1:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update1:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update4:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update3:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update2:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update5:windows:::::* cpe:2.3:a:sun:jre:1.4.2::linux::::: cpe:2.3:a:sun:jre:1.4.2:update5:linux:::::* cpe:2.3:a:sun:jre:1.4.2:update2:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update3:linux:::::* cpe:2.3:a:sun:jre:1.4.2::windows::::: cpe:2.3:a:sun:jre:1.4.2:update3:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update4:windows:::::* cpe:2.3:a:sun:jre:1.4.2:update5:solaris:::::* cpe:2.3:a:sun:jre:1.4.2:update20:::::: cpe:2.3:a:sun:jre:1.4.2:update17:::::: cpe:2.3:a:sun:jre:1.4.2:update19:::::: cpe:2.3:a:sun:jre:1.4.2:update18:::::: cpe:2.3:a:sun:jre:1.4.2:update16:::::: cpe:2.3:a:sun:jre:1.4.2:update28:::::: cpe:2.3:a:sun:jre:1.4.2:-:::::: cpe:2.3:a:sun:jre:1.4.1_07::windows::::: cpe:2.3:a:sun:jre:1.4.1_07::solaris::::: cpe:2.3:a:sun:jre:1.4.1_07::linux::::: cpe:2.3:a:sun:jre:1.4.1_07:::::::* cpe:2.3:a:sun:jre:1.4.1_06::solaris::::: cpe:2.3:a:sun:jre:1.4.1_06:::::::* cpe:2.3:a:sun:jre:1.4.1_06::linux::::: cpe:2.3:a:sun:jre:1.4.1_06::windows::::: cpe:2.3:a:sun:jre:1.4.1_05::linux::::: cpe:2.3:a:sun:jre:1.4.1_05::windows::::: cpe:2.3:a:sun:jre:1.4.1_05:::::::* cpe:2.3:a:sun:jre:1.4.1_05::solaris::::: cpe:2.3:a:sun:jre:1.4.1_04:::::::* cpe:2.3:a:sun:jre:1.4.1_04::windows::::: cpe:2.3:a:sun:jre:1.4.1_04::linux::::: cpe:2.3:a:sun:jre:1.4.1_04::solaris::::: cpe:2.3:a:sun:jre:1.4.1_03::solaris::::: cpe:2.3:a:sun:jre:1.4.1_03:::::::* cpe:2.3:a:sun:jre:1.4.1_03::windows::::: cpe:2.3:a:sun:jre:1.4.1_03::linux::::: cpe:2.3:a:sun:jre:1.4.1_02::solaris::::: cpe:2.3:a:sun:jre:1.4.1_02::linux::::: cpe:2.3:a:sun:jre:1.4.1_02::windows::::: cpe:2.3:a:sun:jre:1.4.1_02:::::::* cpe:2.3:a:sun:jre:1.4.1_01::solaris::::: cpe:2.3:a:sun:jre:1.4.1_01::windows::::: cpe:2.3:a:sun:jre:1.4.1_01::linux::::: cpe:2.3:a:sun:jre:1.4.1_01:::::::* cpe:2.3:a:sun:jre:1.4.1:update3:::::: cpe:2.3:a:sun:jre:1.4.1::linux::::: cpe:2.3:a:sun:jre:1.4.1:update3:linux:::::* cpe:2.3:a:sun:jre:1.4.1:update3:solaris:::::* cpe:2.3:a:sun:jre:1.4.1::windows::::: cpe:2.3:a:sun:jre:1.4.1::solaris::::: cpe:2.3:a:sun:jre:1.4.1:update3:windows:::::* cpe:2.3:a:sun:jre:1.4.1:update2:::::: cpe:2.3:a:sun:jre:1.4.1:update4:::::: cpe:2.3:a:sun:jre:1.4.1:update1:::::: cpe:2.3:a:sun:jre:1.4.1:update7:::::: cpe:2.3:a:sun:jre:1.4.1:update6:::::: cpe:2.3:a:sun:jre:1.4.1:update5:::::: cpe:2.3:a:sun:jre:1.4.1:-:::::: cpe:2.3:a:sun:jre:1.4.0_04::solaris::::: cpe:2.3:a:sun:jre:1.4.0_04::windows::::: cpe:2.3:a:sun:jre:1.4.0_04::linux::::: cpe:2.3:a:sun:jre:1.4.0_04:::::::* cpe:2.3:a:sun:jre:1.4.0_03::solaris::::: cpe:2.3:a:sun:jre:1.4.0_03::linux::::: cpe:2.3:a:sun:jre:1.4.0_03::windows::::: cpe:2.3:a:sun:jre:1.4.0_03:::::::* cpe:2.3:a:sun:jre:1.4.0_02::linux::::: cpe:2.3:a:sun:jre:1.4.0_02::windows::::: cpe:2.3:a:sun:jre:1.4.0_02::solaris::::: cpe:2.3:a:sun:jre:1.4.0_02:::::::* cpe:2.3:a:sun:jre:1.4.0_01::solaris::::: cpe:2.3:a:sun:jre:1.4.0_01::windows::::: cpe:2.3:a:sun:jre:1.4.0_01::linux::::: cpe:2.3:a:sun:jre:1.4.0_01:::::::* cpe:2.3:a:sun:jre:1.4.0:::::::* cpe:2.3:a:sun:jre:1.4:::::::* cpe:2.3:a:sun:jre:1.4::linux::::: cpe:2.3:a:sun:jre:1.4::solaris::::: cpe:2.3:a:sun:jre:1.4::windows::::: cpe:2.3:a:sun:jre:1.3.1_9:::::::* cpe:2.3:a:sun:jre:1.3.1_8:::::::* cpe:2.3:a:sun:jre:1.3.1_7:::::::* cpe:2.3:a:sun:jre:1.3.1_6:::::::* cpe:2.3:a:sun:jre:1.3.1_5:::::::* cpe:2.3:a:sun:jre:1.3.1_4:::::::* cpe:2.3:a:sun:jre:1.3.1_3:::::::* cpe:2.3:a:sun:jre:1.3.1_28:::::::* cpe:2.3:a:sun:jre:1.3.1_27:::::::* cpe:2.3:a:sun:jre:1.3.1_26:::::::* cpe:2.3:a:sun:jre:1.3.1_25:::::::* cpe:2.3:a:sun:jre:1.3.1_24:::::::* cpe:2.3:a:sun:jre:1.3.1_23:::::::* cpe:2.3:a:sun:jre:1.3.1_22:::::::* cpe:2.3:a:sun:jre:1.3.1_21:::::::* cpe:2.3:a:sun:jre:1.3.1_20:::::::* cpe:2.3:a:sun:jre:1.3.1_2:::::::* cpe:2.3:a:sun:jre:1.3.1_19:::::::* cpe:2.3:a:sun:jre:1.3.1_18:::::::* cpe:2.3:a:sun:jre:1.3.1_17:::::::* cpe:2.3:a:sun:jre:1.3.1_16:::::::* cpe:2.3:a:sun:jre:1.3.1_15:::::::* cpe:2.3:a:sun:jre:1.3.1_14:::::::* cpe:2.3:a:sun:jre:1.3.1_13:::::::* cpe:2.3:a:sun:jre:1.3.1_12:::::::* cpe:2.3:a:sun:jre:1.3.1_11:::::::* cpe:2.3:a:sun:jre:1.3.1_10:::::::* cpe:2.3:a:sun:jre:1.3.1_1:::::::* cpe:2.3:a:sun:jre:1.3.1_09:::::::* cpe:2.3:a:sun:jre:1.3.1_09::linux::::: cpe:2.3:a:sun:jre:1.3.1_09::solaris::::: cpe:2.3:a:sun:jre:1.3.1_09::windows::::: cpe:2.3:a:sun:jre:1.3.1_08:::::::* cpe:2.3:a:sun:jre:1.3.1_07:::::::* cpe:2.3:a:sun:jre:1.3.1_07::solaris::::: cpe:2.3:a:sun:jre:1.3.1_07::linux::::: cpe:2.3:a:sun:jre:1.3.1_07::windows::::: cpe:2.3:a:sun:jre:1.3.1_06:::::::* cpe:2.3:a:sun:jre:1.3.1_06::solaris::::: cpe:2.3:a:sun:jre:1.3.1_06::linux::::: cpe:2.3:a:sun:jre:1.3.1_06::windows::::: cpe:2.3:a:sun:jre:1.3.1_05:::::::* cpe:2.3:a:sun:jre:1.3.1_05::linux::::: cpe:2.3:a:sun:jre:1.3.1_05::windows::::: cpe:2.3:a:sun:jre:1.3.1_05::solaris::::: cpe:2.3:a:sun:jre:1.3.1_04:::::::* cpe:2.3:a:sun:jre:1.3.1_03:::::::* cpe:2.3:a:sun:jre:1.3.1_03::windows::::: cpe:2.3:a:sun:jre:1.3.1_03::solaris::::: cpe:2.3:a:sun:jre:1.3.1_03::linux::::: cpe:2.3:a:sun:jre:1.3.1_02::solaris::::: cpe:2.3:a:sun:jre:1.3.1_02::windows::::: cpe:2.3:a:sun:jre:1.3.1_02::linux::::: cpe:2.3:a:sun:jre:1.3.1_02:::::::* cpe:2.3:a:sun:jre:1.3.1_01a:::::::* cpe:2.3:a:sun:jre:1.3.1_01:::::::* cpe:2.3:a:sun:jre:1.3.1:update2:::::: cpe:2.3:a:sun:jre:1.3.1:update1:::::: cpe:2.3:a:sun:jre:1.3.1:update16:::::: cpe:2.3:a:sun:jre:1.3.1:update18:::::: cpe:2.3:a:sun:jre:1.3.1:update20:::::: cpe:2.3:a:sun:jre:1.3.1:update19:::::: cpe:2.3:a:sun:jre:1.3.1:update1a:::::: cpe:2.3:a:sun:jre:1.3.1:update8:::::: cpe:2.3:a:sun:jre:1.3.1:update15:::::: cpe:2.3:a:sun:jre:1.3.1:update4:::::: cpe:2.3:a:sun:jre:1.3.1:update4:windows:::::* cpe:2.3:a:sun:jre:1.3.1::linux::::: cpe:2.3:a:sun:jre:1.3.1:update8:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update1a:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:linux:::::* cpe:2.3:a:sun:jre:1.3.1:update4:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update8:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:windows:::::* cpe:2.3:a:sun:jre:1.3.1:update1:solaris:::::* cpe:2.3:a:sun:jre:1.3.1:update8:linux:::::* cpe:2.3:a:sun:jre:1.3.1:update12:::::: cpe:2.3:a:sun:jre:1.3.1:update17:::::: cpe:2.3:a:sun:jre:1.3.1:-:::::: cpe:2.3:a:sun:jre:1.3.0:update5:::::: cpe:2.3:a:sun:jre:1.3.0:update4:::::: cpe:2.3:a:sun:jre:1.3.0:update1:::::: cpe:2.3:a:sun:jre:1.3.0:update3:::::: cpe:2.3:a:sun:jre:1.3.0:update2:::::: cpe:2.3:a:sun:jre:1.3.0:update4:windows:::::* cpe:2.3:a:sun:jre:1.3.0:update5:linux:::::* cpe:2.3:a:sun:jre:1.3.0:update5:solaris:::::* cpe:2.3:a:sun:jre:1.3.0:update3:linux:::::* cpe:2.3:a:sun:jre:1.3.0::windows::::: cpe:2.3:a:sun:jre:1.3.0:update4:linux:::::* cpe:2.3:a:sun:jre:1.3.0:update2:solaris:::::* cpe:2.3:a:sun:jre:1.3.0:update1:linux:::::* cpe:2.3:a:sun:jre:1.3.0::linux::::: cpe:2.3:a:sun:jre:1.3.0:update5:windows:::::* cpe:2.3:a:sun:jre:1.3.0:update2:linux:::::* cpe:2.3:a:sun:jre:1.3.0::solaris::::: cpe:2.3:a:sun:jre:1.3.0:update2:windows:::::* cpe:2.3:a:sun:jre:1.3.0:-:::::: cpe:2.3:a:sun:jre:1.2.2_07::solaris::::: cpe:2.3:a:sun:jre:1.2.2_012::solaris::::: cpe:2.3:a:sun:jre:1.2.2_011::solaris::::: cpe:2.3:a:sun:jre:1.2.2_011::linux::::: cpe:2.3:a:sun:jre:1.2.2_011::windows::::: cpe:2.3:a:sun:jre:1.2.2_007::linux::::: cpe:2.3:a:sun:jre:1.2.2_007::solaris::::: cpe:2.3:a:sun:jre:1.2.2_007::windows::::: cpe:2.3:a:sun:jre:1.2.2_006::linux::::: cpe:2.3:a:sun:jre:1.2.2_005::linux::::: cpe:2.3:a:sun:jre:1.2.2_004::linux::::: cpe:2.3:a:sun:jre:1.2.2_003::linux::::: cpe:2.3:a:sun:jre:1.2.2_003::linux_production::::: cpe:2.3:a:sun:jre:1.2.2::solaris::::: cpe:2.3:a:sun:jre:1.2.2:update10:linux:::::* cpe:2.3:a:sun:jre:1.2.2:update10:solaris:::::* cpe:2.3:a:sun:jre:1.2.2::windows::::: cpe:2.3:a:sun:jre:1.2.2:update10:windows:::::* cpe:2.3:a:sun:jre:1.2.2::linux_production::::: cpe:2.3:a:sun:jre:1.2.2:update10:::::: cpe:2.3:a:sun:jre:1.2:::::::* cpe:2.3:a:sun:jre:1.1.8:update13:::::: cpe:2.3:a:sun:jre:1.1.8:update7:::::: cpe:2.3:a:sun:jre:1.1.8:update8:::::: cpe:2.3:a:sun:jre:1.1.8:update14:::::: cpe:2.3:a:sun:jre:1.1:::::::*	356
Application	Sun Sdk cpe:2.3:a:sun:sdk:1.4.2_9:::::::* cpe:2.3:a:sun:sdk:1.4.2_8:::::::* cpe:2.3:a:sun:sdk:1.4.2_7:::::::* cpe:2.3:a:sun:sdk:1.4.2_6:::::::* cpe:2.3:a:sun:sdk:1.4.2_5:::::::* cpe:2.3:a:sun:sdk:1.4.2_4:::::::* cpe:2.3:a:sun:sdk:1.4.2_3:::::::* cpe:2.3:a:sun:sdk:1.4.2_25:::::::* cpe:2.3:a:sun:sdk:1.4.2_24:::::::* cpe:2.3:a:sun:sdk:1.4.2_23:::::::* cpe:2.3:a:sun:sdk:1.4.2_22:::::::* cpe:2.3:a:sun:sdk:1.4.2_21:::::::* cpe:2.3:a:sun:sdk:1.4.2_20:::::::* cpe:2.3:a:sun:sdk:1.4.2_2:::::::* cpe:2.3:a:sun:sdk:1.4.2_19:::::::* cpe:2.3:a:sun:sdk:1.4.2_18:::::::* cpe:2.3:a:sun:sdk:1.4.2_17:::::::* cpe:2.3:a:sun:sdk:1.4.2_16:::::::* cpe:2.3:a:sun:sdk:1.4.2_15:::::::* cpe:2.3:a:sun:sdk:1.4.2_14:::::::* cpe:2.3:a:sun:sdk:1.4.2_13:::::::* cpe:2.3:a:sun:sdk:1.4.2_12:::::::* cpe:2.3:a:sun:sdk:1.4.2_11:::::::* cpe:2.3:a:sun:sdk:1.4.2_10:::::::* cpe:2.3:a:sun:sdk:1.4.2_1:::::::* cpe:2.3:a:sun:sdk:1.4.2_09:::::::* cpe:2.3:a:sun:sdk:1.4.2_08:::::::* cpe:2.3:a:sun:sdk:1.4.2_07:::::::* cpe:2.3:a:sun:sdk:1.4.2_06:::::::* cpe:2.3:a:sun:sdk:1.4.2_05:::::::* cpe:2.3:a:sun:sdk:1.4.2_04:::::::* cpe:2.3:a:sun:sdk:1.4.2_03:::::::* cpe:2.3:a:sun:sdk:1.4.2_02:::::::* cpe:2.3:a:sun:sdk:1.4.2_01:::::::* cpe:2.3:a:sun:sdk:1.4.2:::::::* cpe:2.3:a:sun:sdk:1.4.1_07:::::::* cpe:2.3:a:sun:sdk:1.4.1_06:::::::* cpe:2.3:a:sun:sdk:1.4.1_05:::::::* cpe:2.3:a:sun:sdk:1.4.1_04:::::::* cpe:2.3:a:sun:sdk:1.4.1_03:::::::* cpe:2.3:a:sun:sdk:1.4.1_02:::::::* cpe:2.3:a:sun:sdk:1.4.1_01:::::::* cpe:2.3:a:sun:sdk:1.4.1:::::::* cpe:2.3:a:sun:sdk:1.4.0_04:::::::* cpe:2.3:a:sun:sdk:1.4.0_03:::::::* cpe:2.3:a:sun:sdk:1.4.0_02:::::::* cpe:2.3:a:sun:sdk:1.4.0_01:::::::* cpe:2.3:a:sun:sdk:1.4.0:::::::* cpe:2.3:a:sun:sdk:1.4:::::::* cpe:2.3:a:sun:sdk:1.3.1_9:::::::* cpe:2.3:a:sun:sdk:1.3.1_8:::::::* cpe:2.3:a:sun:sdk:1.3.1_7:::::::* cpe:2.3:a:sun:sdk:1.3.1_6:::::::* cpe:2.3:a:sun:sdk:1.3.1_5:::::::* cpe:2.3:a:sun:sdk:1.3.1_4:::::::* cpe:2.3:a:sun:sdk:1.3.1_3:::::::* cpe:2.3:a:sun:sdk:1.3.1_28:::::::* cpe:2.3:a:sun:sdk:1.3.1_27:::::::* cpe:2.3:a:sun:sdk:1.3.1_26:::::::* cpe:2.3:a:sun:sdk:1.3.1_25:::::::* cpe:2.3:a:sun:sdk:1.3.1_24:::::::* cpe:2.3:a:sun:sdk:1.3.1_23:::::::* cpe:2.3:a:sun:sdk:1.3.1_22:::::::* cpe:2.3:a:sun:sdk:1.3.1_21:::::::* cpe:2.3:a:sun:sdk:1.3.1_20:::::::* cpe:2.3:a:sun:sdk:1.3.1_2:::::::* cpe:2.3:a:sun:sdk:1.3.1_19:::::::* cpe:2.3:a:sun:sdk:1.3.1_18:::::::* cpe:2.3:a:sun:sdk:1.3.1_17:::::::* cpe:2.3:a:sun:sdk:1.3.1_16:::::::* cpe:2.3:a:sun:sdk:1.3.1_15:::::::* cpe:2.3:a:sun:sdk:1.3.1_14:::::::* cpe:2.3:a:sun:sdk:1.3.1_13:::::::* cpe:2.3:a:sun:sdk:1.3.1_12:::::::* cpe:2.3:a:sun:sdk:1.3.1_11:::::::* cpe:2.3:a:sun:sdk:1.3.1_10:::::::* cpe:2.3:a:sun:sdk:1.3.1_1:::::::* cpe:2.3:a:sun:sdk:1.3.1_09:::::::* cpe:2.3:a:sun:sdk:1.3.1_08:::::::* cpe:2.3:a:sun:sdk:1.3.1_07:::::::* cpe:2.3:a:sun:sdk:1.3.1_06:::::::* cpe:2.3:a:sun:sdk:1.3.1_05:::::::* cpe:2.3:a:sun:sdk:1.3.1_04:::::::* cpe:2.3:a:sun:sdk:1.3.1_03:::::::* cpe:2.3:a:sun:sdk:1.3.1_02:::::::* cpe:2.3:a:sun:sdk:1.3.1_01a:::::::* cpe:2.3:a:sun:sdk:1.3.1_01:::::::* cpe:2.3:a:sun:sdk:1.3.1:::::::* cpe:2.3:a:sun:sdk:1.3.0_05:::::::* cpe:2.3:a:sun:sdk:1.3.0_04:::::::* cpe:2.3:a:sun:sdk:1.3.0_03:::::::* cpe:2.3:a:sun:sdk:1.3.0_02:::::::* cpe:2.3:a:sun:sdk:1.3.0_01:::::::* cpe:2.3:a:sun:sdk:1.3.0:::::::* cpe:2.3:a:sun:sdk:1.3.0::standard::::: cpe:2.3:a:sun:sdk:1.3_05:::::::* cpe:2.3:a:sun:sdk:1.3_02:::::::* cpe:2.3:a:sun:sdk:1.2.2_10:::::::* cpe:2.3:a:sun:sdk:1.2.2_010:::::::* cpe:2.3:a:sun:sdk:1.1.8_007:::::::* cpe:2.3:a:sun:sdk:1.1.3:::::::*	101
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::lts::: cpe:2.3:o:canonical:ubuntu_linux:9.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:9.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04::::-::: cpe:2.3:o:canonical:ubuntu_linux:8.04::::lts:::	7
Os	Debian Debian Linux cpe:2.3:o:debian:debian_linux:8.0:::::::* cpe:2.3:o:debian:debian_linux:7.0:::::::* cpe:2.3:o:debian:debian_linux:6.0:::::::* cpe:2.3:o:debian:debian_linux:5.0:::::::* cpe:2.3:o:debian:debian_linux:4.0:::::::*	5
Os	Fedoraproject Fedora cpe:2.3:o:fedoraproject:fedora:14:::::::* cpe:2.3:o:fedoraproject:fedora:13:::::::* cpe:2.3:o:fedoraproject:fedora:12:::::::* cpe:2.3:o:fedoraproject:fedora:11:::::::*	4
Os	Opensuse cpe:2.3:o:opensuse:opensuse:11.2:::::::* cpe:2.3:o:opensuse:opensuse:11.1:::::::* cpe:2.3:o:opensuse:opensuse:11.0:::::::* cpe:2.3:o:opensuse:opensuse:10.3:::::::* cpe:2.3:o:opensuse:opensuse:10.2:::::::* cpe:2.3:o:opensuse:opensuse:10.0:::::::*	6
Os	Suse Linux Enterprise cpe:2.3:o:suse:linux_enterprise:11.0:sp1:::::: cpe:2.3:o:suse:linux_enterprise:11.0:-:::::: cpe:2.3:o:suse:linux_enterprise:10.0:sp3::::::	3

SAINT Exploits

Description	Link
Java Runtime CMM readMabCurveData Buffer Overflow	More info here
Java Runtime Environment Soundbank Resource Name Stack Buffer Overflow	More info here
Java Runtime Environment MixerSequence Function Pointer Control	More info here
Adobe Reader authplay.dll newfunction Memory Corruption	More info here

ExploitDB Exploits

id	Description
2012-02-16	Java MixerSequencer Object GM_Song Structure Handling Vulnerability
2010-09-25	Adobe Flash Player "newfunction" Invalid Pointer Use
2010-09-20	Adobe Flash Player "newfunction" Invalid Pointer Use
2010-09-27	Java RMIConnectionImpl Deserialization Privilege Escalation Exploit
2010-12-15	Java Statement.invoke() Trusted Method Chain Exploit
2010-09-20	MOAUB #20 - Java CMM readMabCurveData Stack Overflow
2010-09-01	MOAUB #1 - Adobe Acrobat Reader and Flash Player
2010-06-09	Adobe Flash and Reader - 0day Exploit PoC (from the wild)
2009-12-21	TLS Renegotiation Vulnerability PoC Exploit

OpenVAS Exploits

Date	Description
2012-08-10	Name : Gentoo Security Advisory GLSA 201206-18 (GnuTLS) File : nvt/glsa_201206_18.nasl
2012-04-30	Name : Gentoo Security Advisory GLSA 201203-22 (nginx) File : nvt/glsa_201203_22.nasl
2012-03-16	Name : VMSA-2011-0003.2 Third party component updates for VMware vCenter Server, vCe... File : nvt/gb_VMSA-2011-0003.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201110-05 (gnutls) File : nvt/glsa_201110_05.nasl
2011-09-07	Name : Mac OS X v10.6.4 Multiple Vulnerabilities (2010-007) File : nvt/gb_macosx_su10-007.nasl
2011-08-09	Name : CentOS Update for httpd CESA-2009:1579 centos3 i386 File : nvt/gb_CESA-2009_1579_httpd_centos3_i386.nasl
2011-08-09	Name : CentOS Update for httpd CESA-2009:1579 centos5 i386 File : nvt/gb_CESA-2009_1579_httpd_centos5_i386.nasl
2011-08-09	Name : CentOS Update for httpd CESA-2009:1580 centos4 i386 File : nvt/gb_CESA-2009_1580_httpd_centos4_i386.nasl
2011-08-09	Name : CentOS Update for openssl CESA-2010:0162 centos5 i386 File : nvt/gb_CESA-2010_0162_openssl_centos5_i386.nasl
2011-08-09	Name : CentOS Update for openssl097a CESA-2010:0164 centos5 i386 File : nvt/gb_CESA-2010_0164_openssl097a_centos5_i386.nasl
2011-08-09	Name : CentOS Update for nspr CESA-2010:0165 centos5 i386 File : nvt/gb_CESA-2010_0165_nspr_centos5_i386.nasl
2011-08-09	Name : CentOS Update for gnutls CESA-2010:0166 centos5 i386 File : nvt/gb_CESA-2010_0166_gnutls_centos5_i386.nasl
2011-08-09	Name : CentOS Update for java CESA-2010:0339 centos5 i386 File : nvt/gb_CESA-2010_0339_java_centos5_i386.nasl
2011-08-09	Name : CentOS Update for java CESA-2010:0768 centos5 i386 File : nvt/gb_CESA-2010_0768_java_centos5_i386.nasl
2011-03-09	Name : Gentoo Security Advisory GLSA 201006-18 (sun-jre-bin sun-jdk emul-linux-x86-j... File : nvt/glsa_201006_18.nasl
2011-03-09	Name : Gentoo Security Advisory GLSA 201009-05 (acroread) File : nvt/glsa_201009_05.nasl
2011-03-09	Name : Gentoo Security Advisory GLSA 201101-09 (adobe-flash) File : nvt/glsa_201101_09.nasl
2011-03-07	Name : Debian Security Advisory DSA 2161-2 (openjdk-6) File : nvt/deb_2161_2.nasl
2011-01-04	Name : HP-UX Update for Java HPSBUX02608 File : nvt/gb_hp_ux_HPSBUX02608.nasl
2010-12-02	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-16312 File : nvt/gb_fedora_2010_16312_java-1.6.0-openjdk_fc14.nasl
2010-11-23	Name : Fedora Update for openssl FEDORA-2010-17826 File : nvt/gb_fedora_2010_17826_openssl_fc12.nasl
2010-11-16	Name : Fedora Update for nss FEDORA-2010-15989 File : nvt/gb_fedora_2010_15989_nss_fc12.nasl
2010-11-16	Name : Fedora Update for proftpd FEDORA-2010-17220 File : nvt/gb_fedora_2010_17220_proftpd_fc12.nasl
2010-11-04	Name : Ubuntu Update for openjdk-6, openjdk-6b18 vulnerabilities USN-1010-1 File : nvt/gb_ubuntu_USN_1010_1.nasl
2010-10-22	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-16240 File : nvt/gb_fedora_2010_16240_java-1.6.0-openjdk_fc12.nasl
2010-10-22	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-16294 File : nvt/gb_fedora_2010_16294_java-1.6.0-openjdk_fc13.nasl
2010-10-19	Name : RedHat Update for java-1.6.0-openjdk RHSA-2010:0768-01 File : nvt/gb_RHSA-2010_0768-01_java-1.6.0-openjdk.nasl
2010-09-27	Name : Ubuntu Update for openssl vulnerability USN-990-1 File : nvt/gb_ubuntu_USN_990_1.nasl
2010-09-27	Name : Ubuntu Update for apache2 vulnerability USN-990-2 File : nvt/gb_ubuntu_USN_990_2.nasl
2010-09-10	Name : SuSE Update for acroread SUSE-SA:2010:037 File : nvt/gb_suse_2010_037.nasl
2010-08-21	Name : FreeBSD Ports: linux-flashplugin File : nvt/freebsd_linux-flashplugin9.nasl
2010-08-16	Name : SuSE Update for flash-player SUSE-SA:2010:034 File : nvt/gb_suse_2010_034.nasl
2010-08-11	Name : Remote Code Execution Vulnerabilities in SChannel (980436) File : nvt/secpod_ms10-049.nasl
2010-07-26	Name : Ubuntu Update for nss vulnerability USN-927-6 File : nvt/gb_ubuntu_USN_927_6.nasl
2010-07-12	Name : SuSE Update for acroread SUSE-SA:2010:029 File : nvt/gb_suse_2010_029.nasl
2010-07-06	Name : FreeBSD Ports: linux-flashplugin File : nvt/freebsd_linux-flashplugin8.nasl
2010-07-02	Name : Ubuntu Update for nss vulnerability USN-927-4 File : nvt/gb_ubuntu_USN_927_4.nasl
2010-07-02	Name : Ubuntu Update for nspr update USN-927-5 File : nvt/gb_ubuntu_USN_927_5.nasl
2010-06-28	Name : Fedora Update for gnutls FEDORA-2010-9487 File : nvt/gb_fedora_2010_9487_gnutls_fc12.nasl
2010-06-25	Name : Fedora Update for openssl FEDORA-2010-9421 File : nvt/gb_fedora_2010_9421_openssl_fc11.nasl
2010-06-25	Name : Fedora Update for gnutls FEDORA-2010-9518 File : nvt/gb_fedora_2010_9518_gnutls_fc13.nasl
2010-06-23	Name : SuSE Update for flash-player SUSE-SA:2010:024 File : nvt/gb_suse_2010_024.nasl
2010-06-22	Name : Adobe Flash Player/Air Multiple Vulnerabilities - June10 (Linux) File : nvt/secpod_adobe_prdts_mult_vuln_jun10_lin.nasl
2010-06-22	Name : Adobe Flash Player/Air Multiple Vulnerabilities - June10 (Win) File : nvt/secpod_adobe_prdts_mult_vuln_jun10_win.nasl
2010-06-18	Name : Fedora Update for openssl FEDORA-2010-9639 File : nvt/gb_fedora_2010_9639_openssl_fc12.nasl
2010-06-15	Name : Adobe Products Remote Code Execution Vulnerability - jun10 (Linux) File : nvt/gb_adobe_prdts_code_exec_vuln_lin_jun10.nasl
2010-06-15	Name : Adobe Products Remote Code Execution Vulnerability - jun10 (Win) File : nvt/gb_adobe_prdts_code_exec_vuln_win_jun10.nasl
2010-06-07	Name : Fedora Update for httpd FEDORA-2010-6055 File : nvt/gb_fedora_2010_6055_httpd_fc12.nasl
2010-06-07	Name : HP-UX Update for Java HPSBUX02524 File : nvt/gb_hp_ux_HPSBUX02524.nasl
2010-05-28	Name : Fedora Update for openssl FEDORA-2010-8742 File : nvt/gb_fedora_2010_8742_openssl_fc12.nasl
2010-05-28	Name : Java for Mac OS X 10.5 Update 7 File : nvt/macosx_java_for_10_5_upd_7.nasl
2010-05-28	Name : Java for Mac OS X 10.6 Update 2 File : nvt/macosx_java_for_10_6_upd_2.nasl
2010-05-07	Name : Fedora Update for httpd FEDORA-2010-6131 File : nvt/gb_fedora_2010_6131_httpd_fc11.nasl
2010-04-30	Name : HP-UX Update for OpenSSL HPSBUX02517 File : nvt/gb_hp_ux_HPSBUX02517.nasl
2010-04-30	Name : Mandriva Update for java-1.6.0-openjdk MDVSA-2010:084 (java-1.6.0-openjdk) File : nvt/gb_mandriva_MDVSA_2010_084.nasl
2010-04-29	Name : Mandriva Update for firefox MDVSA-2010:070-1 (firefox) File : nvt/gb_mandriva_MDVSA_2010_070_1.nasl
2010-04-29	Name : Mandriva Update for openssl MDVSA-2010:076-1 (openssl) File : nvt/gb_mandriva_MDVSA_2010_076_1.nasl
2010-04-29	Name : SuSE Update for MozillaFirefox,MozillaThunderbird,seamonkey,mozilla-nss SUSE-... File : nvt/gb_suse_2010_021.nasl
2010-04-19	Name : Fedora Update for openssl FEDORA-2010-5357 File : nvt/gb_fedora_2010_5357_openssl_fc11.nasl
2010-04-19	Name : Mandriva Update for openssl MDVSA-2010:076 (openssl) File : nvt/gb_mandriva_MDVSA_2010_076.nasl
2010-04-16	Name : Mandriva Update for firefox MDVSA-2010:070 (firefox) File : nvt/gb_mandriva_MDVSA_2010_070.nasl
2010-04-16	Name : Ubuntu Update for nss vulnerability USN-927-1 File : nvt/gb_ubuntu_USN_927_1.nasl
2010-04-09	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-6025 File : nvt/gb_fedora_2010_6025_java-1.6.0-openjdk_fc12.nasl
2010-04-09	Name : Fedora Update for java-1.6.0-openjdk FEDORA-2010-6039 File : nvt/gb_fedora_2010_6039_java-1.6.0-openjdk_fc11.nasl
2010-04-09	Name : Mandriva Update for nss MDVSA-2010:069 (nss) File : nvt/gb_mandriva_MDVSA_2010_069.nasl
2010-04-09	Name : Ubuntu Update for openjdk-6 vulnerabilities USN-923-1 File : nvt/gb_ubuntu_USN_923_1.nasl
2010-04-07	Name : Oracle Java SE Multiple Vulnerabilities (Linux) File : nvt/gb_oracle_java_se_mult_vuln_lin_apr10.nasl
2010-04-07	Name : Oracle Java SE Multiple Vulnerabilities (Windows) File : nvt/gb_oracle_java_se_mult_vuln_win_apr10.nasl
2010-04-06	Name : FreeBSD Ports: seamonkey File : nvt/freebsd_seamonkey0.nasl
2010-04-06	Name : RedHat Update for java-1.6.0-openjdk RHSA-2010:0339-01 File : nvt/gb_RHSA-2010_0339-01_java-1.6.0-openjdk.nasl
2010-04-06	Name : Mac OS X Security Update 2010-001 File : nvt/macosx_secupd_2010-001.nasl
2010-03-31	Name : CentOS Update for openssl CESA-2010:0163 centos3 i386 File : nvt/gb_CESA-2010_0163_openssl_centos3_i386.nasl
2010-03-31	Name : CentOS Update for openssl CESA-2010:0163 centos4 i386 File : nvt/gb_CESA-2010_0163_openssl_centos4_i386.nasl
2010-03-31	Name : CentOS Update for nspr CESA-2010:0165 centos4 i386 File : nvt/gb_CESA-2010_0165_nspr_centos4_i386.nasl
2010-03-31	Name : CentOS Update for gnutls CESA-2010:0167 centos4 i386 File : nvt/gb_CESA-2010_0167_gnutls_centos4_i386.nasl
2010-03-31	Name : RedHat Update for openssl RHSA-2010:0162-01 File : nvt/gb_RHSA-2010_0162-01_openssl.nasl
2010-03-31	Name : RedHat Update for openssl RHSA-2010:0163-01 File : nvt/gb_RHSA-2010_0163-01_openssl.nasl
2010-03-31	Name : RedHat Update for openssl097a RHSA-2010:0164-01 File : nvt/gb_RHSA-2010_0164-01_openssl097a.nasl
2010-03-31	Name : RedHat Update for nss RHSA-2010:0165-01 File : nvt/gb_RHSA-2010_0165-01_nss.nasl
2010-03-31	Name : RedHat Update for gnutls RHSA-2010:0166-01 File : nvt/gb_RHSA-2010_0166-01_gnutls.nasl
2010-03-31	Name : RedHat Update for gnutls RHSA-2010:0167-01 File : nvt/gb_RHSA-2010_0167-01_gnutls.nasl
2010-03-31	Name : Fedora Update for nss FEDORA-2010-3905 File : nvt/gb_fedora_2010_3905_nss_fc11.nasl
2010-03-12	Name : Mandriva Update for cacti MDVA-2010:089 (cacti) File : nvt/gb_mandriva_MDVA_2010_089.nasl
2010-03-02	Name : Fedora Update for httpd FEDORA-2009-12747 File : nvt/gb_fedora_2009_12747_httpd_fc11.nasl
2010-03-02	Name : Fedora Update for nss FEDORA-2010-1127 File : nvt/gb_fedora_2010_1127_nss_fc12.nasl
2010-03-02	Name : Mandriva Update for rsh MDVA-2010:076 (rsh) File : nvt/gb_mandriva_MDVA_2010_076.nasl
2010-03-02	Name : Mandriva Update for x11-driver-video-ati MDVA-2010:084 (x11-driver-video-ati) File : nvt/gb_mandriva_MDVA_2010_084.nasl
2010-02-19	Name : Mandriva Update for mandriva-release MDVA-2010:069 (mandriva-release) File : nvt/gb_mandriva_MDVA_2010_069.nasl
2010-02-11	Name : Microsoft Windows TLS/SSL Spoofing Vulnerability (977377) File : nvt/gb_ms_tls_ssl_spoofing_vuln.nasl
2009-12-30	Name : Fedora Core 12 FEDORA-2009-12229 (tomcat-native) File : nvt/fcore_2009_12229.nasl
2009-12-30	Name : Fedora Core 11 FEDORA-2009-12305 (tomcat-native) File : nvt/fcore_2009_12305.nasl
2009-12-30	Name : Fedora Core 12 FEDORA-2009-12606 (httpd) File : nvt/fcore_2009_12606.nasl
2009-12-30	Name : Fedora Core 11 FEDORA-2009-13236 (proftpd) File : nvt/fcore_2009_13236.nasl
2009-12-30	Name : Fedora Core 12 FEDORA-2009-13250 (proftpd) File : nvt/fcore_2009_13250.nasl
2009-12-14	Name : Fedora Core 10 FEDORA-2009-12604 (httpd) File : nvt/fcore_2009_12604.nasl
2009-12-14	Name : Fedora Core 12 FEDORA-2009-12968 (nss-util) File : nvt/fcore_2009_12968.nasl
2009-12-14	Name : Gentoo Security Advisory GLSA 200912-01 (openssl) File : nvt/glsa_200912_01.nasl
2009-12-10	Name : Fedora Core 12 FEDORA-2009-12750 (nginx) File : nvt/fcore_2009_12750.nasl
2009-12-10	Name : Fedora Core 10 FEDORA-2009-12775 (nginx) File : nvt/fcore_2009_12775.nasl
2009-12-10	Name : Fedora Core 11 FEDORA-2009-12782 (nginx) File : nvt/fcore_2009_12782.nasl
2009-12-10	Name : FreeBSD Security Advisory (FreeBSD-SA-09:15.ssl.asc) File : nvt/freebsdsa_ssl.nasl
2009-12-10	Name : Mandriva Security Advisory MDVSA-2009:323 (apache) File : nvt/mdksa_2009_323.nasl
2009-11-23	Name : SLES9: Security update for OpenSSL File : nvt/sles9p5062661.nasl
2009-11-23	Name : SuSE Security Advisory SUSE-SA:2009:057 (openssl) File : nvt/suse_sa_2009_057.nasl
2009-11-17	Name : RedHat Security Advisory RHSA-2009:1579 File : nvt/RHSA_2009_1579.nasl
2009-11-17	Name : RedHat Security Advisory RHSA-2009:1580 File : nvt/RHSA_2009_1580.nasl
2009-11-17	Name : CentOS Security Advisory CESA-2009:1579 (httpd) File : nvt/ovcesa2009_1579.nasl
2009-11-17	Name : CentOS Security Advisory CESA-2009:1580 (httpd) File : nvt/ovcesa2009_1580.nasl
2009-11-17	Name : SLES10: Security update for OpenSSL File : nvt/sles10_compat-openssl02.nasl
2009-11-17	Name : SLES10: Security update for OpenSSL File : nvt/sles10_openssl3.nasl
2009-11-17	Name : SLES11: Security update for libopenssl File : nvt/sles11_libopenssl0_9_82.nasl
2009-03-13	Name : Ubuntu USN-731-1 (apache2) File : nvt/ubuntu_731_1.nasl
2009-03-13	Name : Ubuntu USN-732-1 (dash) File : nvt/ubuntu_732_1.nasl
0000-00-00	Name : Slackware Advisory SSA:2009-320-01 openssl File : nvt/esoft_slk_ssa_2009_320_01.nasl
0000-00-00	Name : Slackware Advisory SSA:2010-067-01 httpd File : nvt/esoft_slk_ssa_2010_067_01.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
77832	Parallels Plesk Panel Billing System TLS Renegotiation Handshakes MiTM Plaint...
75622	Blue Coat Director TLS Renegotiation Handshakes MiTM Plaintext Data Injection
74335	Hitachi Web Server TLS Renegotiation Handshakes MiTM Plaintext Data Injection Hitachi Web Server contains a flaw related to the SSL protocol failing to properly associate renegotiation handshakes with an existing connection, allowing a man-in-the-middle attacker to insert data into HTTPS sessions, and possibly other sessions which are protected by TLS or SSL. The issue is triggered when a remote attacker sends an unauthenticated request which is processed retroactively by the server in a post-renegotiation context, related to a plaintext injection attack.
71961	Oracle Fusion Middleware Oracle WebLogic Server TLS Renegotiation Handshakes ... Oracle Fusion Middleware contains a flaw related to the Oracle WebLogic Server component. The component fails to properly associate renegotiation handshakes with an existing connection, allowing a man-in-the-middle attacker to insert data into HTTPS sessions, and possibly other sessions which are protected by TLS or SSL. The issue is triggered when a remote attacker sends an unauthenticated request which is processed retroactively by the server in a post-renegotiation context, related to a plaintext injection attack.
71951	Oracle Multiple Products Oracle Security Service TLS Renegotiation Handshakes... Oracle Database and Fusion Middleware contain a flaw related to the Oracle Security Service component. The component fails to properly associate renegotiation handshakes with an existing connection, allowing a man-in-the-middle attacker to insert data into HTTPS sessions, and possibly other sessions which are protected by TLS or SSL. The issue is triggered when a remote attacker sends an unauthenticated request which is processed retroactively by the server in a post-renegotiation context, related to a plaintext injection attack.
70620	mGuard TLS Renegotiation Handshakes MiTM Plaintext Data Injection mGuard contains a flaw related to the TLS protocol's failure to properly associate renegotiation handshakes with an existing connection. The issue is triggered when a man-in-the-middle attacker uses unauthenticated requests processed retroactively. This may allow an attacker to inject data into HTTPS sessions.
70055	Oracle Supply Chain Transportation Management TLS Renegotiation Handshakes Mi... Oracle Supply Chain contains a flaw related to the Transportation Management component. The component fails to properly associate renegotiation handshakes with an existing connection, allowing a man-in-the-middle attacker to insert data into HTTPS sessions, and possibly other sessions which are protected by TLS or SSL. The issue is triggered when a remote attacker sends an unauthenticated request which is processed retroactively by the server in a post-renegotiation context, related to a plaintext injection attack.
69561	IBM WebSphere MQ Internet Pass-Thru TLS Renegotiation Handshake MiTM Plaintex... IBM WebSphere MQ Internet Pass-Thru contains a flaw related to the TLS Renegotiation Handshake protocol. The issue is triggered when a remote attacker uses a MiTM attack to insert arbitrary plaintext into data sent by a legitimate client.
69032	Oracle Java SE / Java for Business TLS Renegotiation Handshake MiTM Plaintext... Oracle Java SE and Java for Business contains a flaw related to the JSSE component. The application fails to properly associate renegotiation handshakes with an existing connection, allowing a MiTM attacker to use an unauthenticated request to insert data into HTTPS sessions, related to a 'plaintext injection' attack
67058	Adobe Flash Player ActionScript connect Method Memory Corruption
67029	HP Threat Management Services zl Module TLS Renegotiation Handshakes MiTM Pla...
66315	HP Insight Manager TLS Renegotiation Handshakes MiTM Plaintext Data Injection
66119	Adobe Flash Player ActionScript Virtual Machine newFrameState Method Remote O...
65600	Adobe Flash Player / AIR on VMWare Tools Unspecified Memory Corruption DoS (2...
65599	Adobe Flash Player / AIR LocalConnection Connect Method Memory Corruption
65598	Adobe Flash Player / AIR Unspecified Memory Corruption DoS (2010-2187)
65597	Adobe Flash Player / AIR Unspecified Application Crash DoS (2010-2186)
65596	Adobe Flash Player / AIR Unspecified Overflow (2010-2185)
65595	Adobe Flash Player / AIR Unspecified Memory Corruption DoS (2010-2184)
65594	Adobe Flash Player / AIR Unspecified Overflow (2010-2183)
65593	Adobe Flash Player / AIR Unspecified Memory Corruption DoS (2010-2182)
65592	Adobe Flash Player / AIR Unspecified Overflow (2010-2181)
65591	Adobe Flash Player / AIR Unspecified Memory Corruption DoS (2010-2180)
65590	Adobe Flash Player / AIR Unspecified URL Parsing XSS (2010-2179)
65589	Adobe Flash Player / AIR Unspecified Memory Corruption DoS (2010-2178)
65588	Adobe Flash Player / AIR Unspecified Memory Corruption DoS (2010-2177)
65587	Adobe Flash Player / AIR Unspecified Memory Corruption DoS (2010-2176)
65586	Adobe Flash Player / AIR Unspecified Memory Corruption DoS (2010-2175)
65585	Adobe Flash Player / AIR newfunction Operator Processing Invalid Pointer Arbi...
65584	Adobe Flash Player / AIR newclass Operator Processing Invalid Pointer Arbitra...
65583	Adobe Flash Player on UNIX Unspecified DoS (2010-2172)
65582	Adobe Flash Player / AIR Multiple Tag JPEG Parsing Memory Corruption
65581	Adobe Flash Player / AIR Unspecified Overflow (2010-2170)
65580	Adobe Flash Player / AIR Unspecified Memory Corruption DoS (2010-2169)
65579	Adobe Flash Player / AIR GIF/JPEG Processing Multiple Unspecified Overflows
65578	Adobe Flash Player / AIR Unspecified Memory Corruption DoS (2010-2166)
65577	Adobe Flash Player / AIR Unspecified Memory Corruption DoS (2010-2165)
65576	Adobe Flash Player / AIR Unspecified Function Image Type Use-after-free Arbit...
65575	Adobe Flash Player / AIR Multiple Unspecified Arbitrary Code Execution (2010-...
65574	Adobe Flash Player / AIR Atom MP4 Parsing Memory Corruption
65573	Adobe Flash Player / AIR Unspecified Code Type Array Index Arbitrary Code Exe...
65572	Adobe Flash Player / AIR ActionScript Virtual Machine 2 getouterscope Opcode ...
65532	Adobe Flash Player / AIR Unspecified Memory Consumption DoS (2009-3793)
65202	OpenOffice.org (OOo) TLS Renegotiation Handshakes MiTM Plaintext Data Injection
65141	Adobe Multiple Products SWF Handling Arbitrary Code Execution
64725	HP System Management Homepage (SMH) TLS Renegotiation Handshakes MiTM Plainte...
64499	ArubaOS HTTPS WebUI Admin Interface TLS Renegotiation Handshakes MiTM Plainte...
64040	IBM DB2 TLS Renegotiation Handshakes MiTM Plaintext Data Injection
63506	Oracle Java SE / Java for Business Java Web Start Java Plug-in Unspecified Re...
63505	Oracle Java SE / Java for Business Unpack200 Malformed Data Handling Overflow
63504	Oracle Java SE / Java for Business Java 2D Unspecified Unauthenticated Remote...
63503	Oracle Java SE / Java for Business Java 2D AWT Library Multiple Method Arbitr...
63502	Oracle Java SE / Java for Business Java 2D JPEGImageDecoderImpl JPEG Decoder ...
63501	Oracle Java SE / Java for Business Java 2D Unspecified Unauthenticated Remote...
63500	Oracle Java SE / Java for Business Java 2D CMM Module readMabCurveData Functi...
63499	Oracle Java SE / Java for Business HotSpot Server Unspecified Unauthenticated...
63498	Oracle Java SE / Java for Business HotSpot Server Unspecified Unauthenticated...
63497	Oracle Java SE / Java for Business Java Web Start Plug-in Unspecified Unauthe...
63496	Oracle Java SE / Java for Business Java Web Start Plug-in Unspecified Unauthe...
63495	Oracle Java SE / Java for Business MIDI Stream MixerSequencer Object metaEven...
63494	Oracle Java SE / Java for Business Sound Unspecified Unauthenticated Remote I...
63493	Oracle Java SE / Java for Business Sound MIDI File MixerSequencer Object GM_S...
63492	Oracle Java SE / Java for Business com.sun.media.sound Library Unspecified Fu...
63491	Oracle Java SE / Java for Business ImageIO JPEGImageReader JPEG Image Dimensi...
63490	Oracle Java SE / Java for Business ImageIO JPEGImageEncoderImpl num_component...
63489	Oracle Java SE / Java for Business JRE Unspecified Unauthenticated Remote Iss...
63488	Oracle Java SE / Java for Business JRE Unspecified Unauthenticated Remote Iss...
63487	Oracle Java SE / Java for Business JRE Unspecified Unauthenticated Remote Iss...
63486	Oracle Java SE / Java for Business JRE Mutable InetAddress Socket Policy Bypass
63485	Oracle Java SE / Java for Business JRE Unspecified Unauthenticated Remote Iss...
63484	Oracle Java SE / Java for Business JRE RMIConnectionImpl Object Handling Priv...
63483	Oracle Java SE / Java for Business JRE Trusted Methods Chaining Remote Code ...
63482	Oracle Java SE / Java for Business JRE Unspecified Remote Information Disclos...
63481	Oracle Java SE / Java for Business JRE Unspecified Remote Information Disclos...
62877	SSH Tectia Audit Player TLS Renegotiation Handshakes MiTM Plaintext Data Inje...
62536	Blue Coat Products TLS Renegotiation Handshakes MiTM Plaintext Data Injection
62273	Opera TLS Renegotiation Handshakes MiTM Plaintext Data Injection
62210	Aruba Mobility Controller TLS Renegotiation Handshakes MiTM Plaintext Data In...
62135	Network Security Services (NSS) TLS Renegotiation Handshakes MiTM Plaintext D...
62064	IBM Java TLS Renegotiation Handshakes MiTM Plaintext Data Injection
61929	IBM WebSphere Application Server TLS Renegotiation Handshakes MiTM Plaintext ...
61785	Avaya Products Multiple Product TLS Renegotiation Handshakes MiTM Plaintext D...
61784	Sun Java System Multiple Product TLS Renegotiation Handshakes MiTM Plaintext ...
61718	IBM WebSphere DataPower TLS Renegotiation Handshakes MiTM Plaintext Data Inje...
61234	IBM SDK for Java TLS Renegotiation Handshakes MiTM Plaintext Data Injection
60521	Ingate Firewall/SIParator SSL / TLS Renegotiation Handshakes MiTM Plaintext D...
60366	Cisco Multiple Devices TLS Renegotiation Handshakes MiTM Plaintext Data Injec...
59974	MatrixSSL TLS Renegotiation Handshakes MiTM Plaintext Data Injection
59973	Citrix Secure Gateway TLS Renegotiation Handshakes MiTM Plaintext Data Injection
59972	GnuTLS TLS Renegotiation Handshakes MiTM Plaintext Data Injection
59971	OpenSSL TLS Renegotiation Handshakes MiTM Plaintext Data Injection
59970	Mozilla Network Security Services (NSS) SSL / TLS Renegotiation Handshakes Mi...
59969	Apache HTTP Server mod_ssl SSL / TLS Renegotiation Handshakes MiTM Plaintext ...
59968	Microsoft Multiple Products SSL / TLS Renegotiation Handshakes MiTM Plaintext...
50073	Adobe Flash Player Differential SWF File Version Response DoS

Information Assurance Vulnerability Management (IAVM)

Date	Description
2012-05-03	IAVM : 2012-B-0048 - Multiple Vulnerabilities in HP Systems Insight Manager Severity : Category I - VMSKEY : V0032178
2012-04-05	IAVM : 2012-B-0038 - Multiple Vulnerabilities in HP Onboard Administrator Severity : Category I - VMSKEY : V0031972
2011-05-12	IAVM : 2011-A-0066 - Multiple Vulnerabilities in VMware Products Severity : Category I - VMSKEY : V0027158

Snort® IPS/IDS

Date	Description
2014-01-10	Adobe Flash Player newfunction memory corruption attempt RuleID : 28676 - Revision : 5 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player newfunction memory corruption attempt RuleID : 28675 - Revision : 5 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player newfunction memory corruption attempt RuleID : 28674 - Revision : 5 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player newfunction memory corruption attempt RuleID : 28673 - Revision : 5 - Type : FILE-FLASH
2014-01-10	Teletubbies exploit kit payload download RuleID : 27886 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Teletubbies exploit kit exploit attempt for Adobe Flash Player RuleID : 27881 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Sakura exploit kit pdf download detection RuleID : 26539 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Sakura exploit kit landing page received RuleID : 26538 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Sakura exploit kit jar download detection RuleID : 26537 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	rmf file download request RuleID : 24509 - Revision : 5 - Type : FILE-IDENTIFY
2014-01-10	Adobe Flash Player newfunction memory corruption exploit attempt RuleID : 23592 - Revision : 7 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player newfunction memory corruption attempt RuleID : 23591 - Revision : 7 - Type : FILE-FLASH
2014-01-10	Adobe Flash use-after-free attack attempt RuleID : 23579 - Revision : 6 - Type : FILE-FLASH
2014-01-10	Adobe flash player newfunction memory corruption attempt RuleID : 23512 - Revision : 5 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader authplay.dll vulnerability exploit attempt RuleID : 23511 - Revision : 7 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader File containing Flash use-after-free attack attempt RuleID : 23510 - Revision : 7 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader malformed Richmedia annotation exploit attempt RuleID : 23509 - Revision : 5 - Type : FILE-PDF
2014-01-10	Oracle Java MixerSequencer RMF MIDI structure handling exploit attempt RuleID : 23490 - Revision : 8 - Type : FILE-MULTIMEDIA
2014-01-10	Adobe Flash Player newfunction memory corruption attempt RuleID : 23265 - Revision : 11 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player newfunction memory corruption attempt RuleID : 23264 - Revision : 10 - Type : FILE-FLASH
2014-01-10	Adobe flash player newfunction memory corruption attempt RuleID : 23263 - Revision : 9 - Type : FILE-PDF
2014-01-10	Phoenix exploit kit post-compromise behavior RuleID : 21860 - Revision : 5 - Type : MALWARE-CNC
2014-01-10	Phoenix exploit kit landing page RuleID : 21640 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Oracle Java runtime RMIConnectionImpl deserialization execution attempt RuleID : 21387 - Revision : 11 - Type : FILE-JAVA
2014-01-10	Eleanore exploit kit post-exploit page request RuleID : 21071 - Revision : 5 - Type : EXPLOIT-KIT
2014-01-10	Eleanore exploit kit pdf exploit page request RuleID : 21070 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Eleanore exploit kit exploit fetch request RuleID : 21069 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Eleanore exploit kit landing page RuleID : 21068 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	ShockwaveFlash.ShockwaveFlash ActiveX clsid access RuleID : 20875 - Revision : 7 - Type : BROWSER-PLUGINS
2014-01-10	Oracle Java trusted method chaining attempt RuleID : 20529 - Revision : 9 - Type : FILE-JAVA
2014-01-10	Adobe Flash Player memory consumption vulnerability RuleID : 20050 - Revision : 12 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player newfunction memory corruption exploit attempt RuleID : 19408 - Revision : 12 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player SWF file MP4 data parsing memory corruption attempt RuleID : 19148 - Revision : 15 - Type : FILE-MULTIMEDIA
2014-01-10	Adobe Flash Player newfunction memory corruption attempt RuleID : 19145 - Revision : 13 - Type : FILE-FLASH
2014-01-10	Oracle Java Soundbank resource name overflow attempt RuleID : 19100 - Revision : 12 - Type : FILE-JAVA
2014-01-10	Oracle Java Runtime CMM readMabCurveData buffer overflow attempt RuleID : 18803 - Revision : 12 - Type : SERVER-WEBAPP
2014-01-10	download of RMF file - potentially malicious RuleID : 17106 - Revision : 10 - Type : FILE-IDENTIFY
2014-01-10	Adobe Acrobat Reader authplay.dll vulnerability exploit attempt RuleID : 16664 - Revision : 12 - Type : FILE-PDF
2014-01-10	Adobe Flash use-after-free attack attempt RuleID : 16634 - Revision : 16 - Type : FILE-FLASH
2014-01-10	Adobe Acrobat Reader File containing Flash use-after-free attack attempt RuleID : 16633 - Revision : 19 - Type : FILE-PDF
2014-01-10	Adobe Acrobat Reader malformed Richmedia annotation exploit attempt RuleID : 16545 - Revision : 21 - Type : FILE-PDF

Nessus® Vulnerability Scanner

Date	Description
2018-04-03	Name : The remote web server may allow remote code execution. File : iis_7_pci.nasl - Type : ACT_GATHER_INFO
2018-03-09	Name : The remote web server is affected by multiple vulnerabilities. File : nginx_0_7_64.nasl - Type : ACT_GATHER_INFO
2017-11-17	Name : The remote host is affected by a MITM vulnerability. File : fortios_FG-IR-17-137.nasl - Type : ACT_GATHER_INFO
2016-03-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0015_remote.nasl - Type : ACT_GATHER_INFO
2016-03-08	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2010-0019_remote.nasl - Type : ACT_GATHER_INFO
2016-03-04	Name : The remote VMware ESX / ESXi host is missing a security-related patch. File : vmware_VMSA-2011-0003_remote.nasl - Type : ACT_GATHER_INFO
2016-01-25	Name : The remote Debian host is missing a security update. File : debian_DLA-400.nasl - Type : ACT_GATHER_INFO
2015-05-11	Name : The remote Debian host is missing a security-related update. File : debian_DSA-3253.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2014-0007.nasl - Type : ACT_GATHER_INFO
2014-11-26	Name : The remote OracleVM host is missing a security update. File : oraclevm_OVMSA-2014-0008.nasl - Type : ACT_GATHER_INFO
2014-10-10	Name : The remote device is missing a vendor-supplied security patch. File : f5_bigip_SOL10737.nasl - Type : ACT_GATHER_INFO
2014-06-30	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201406-32.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_acroread-100826.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_flash-player-100811.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_gnutls-101025.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_gnutls-101206.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_java-1_6_0-openjdk-101103.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2014-04-16	Name : The remote AIX host is running a vulnerable version of OpenSSL. File : aix_ssl_advisory.nasl - Type : ACT_GATHER_INFO
2013-11-21	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201311-13.nasl - Type : ACT_GATHER_INFO
2013-09-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201309-15.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1579.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2009-1580.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0162.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0163.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0164.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0165.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0166.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0167.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0333.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0339.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0768.nasl - Type : ACT_GATHER_INFO
2013-06-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1579.nasl - Type : ACT_GATHER_INFO
2013-06-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2009-1580.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host contains a runtime environment that is affected by multi... File : oracle_java_cpu_mar_2010_unix.nasl - Type : ACT_GATHER_INFO
2013-02-22	Name : The remote Unix host contains a programming platform that is affected by mult... File : oracle_java_cpu_oct_2010_unix.nasl - Type : ACT_GATHER_INFO
2013-02-18	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2626.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0464.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0470.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-0880.nasl - Type : ACT_GATHER_INFO
2013-01-08	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201301-01.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20091111_httpd_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100325_gnutls_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100325_nss_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20100325_openssl097a_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100325_openssl_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100325_openssl_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100331_java_1_6_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100331_java__jdk_1_6_0__on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101013_java_1_6_0_openjdk_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101014_java__jdk_1_6_0__on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101110_java_1_6_0_openjdk_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2012-06-25	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201206-18.nasl - Type : ACT_GATHER_INFO
2012-06-21	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201203-22.nasl - Type : ACT_GATHER_INFO
2012-06-15	Name : The remote Windows host contains software that is affected by multiple vulner... File : hp_systems_insight_manager_700_multiple_vulns.nasl - Type : ACT_GATHER_INFO
2012-05-17	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-7036.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-7645.nasl - Type : ACT_GATHER_INFO
2011-10-12	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-05.nasl - Type : ACT_GATHER_INFO
2011-07-28	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_compat-openssl097g-110721.nasl - Type : ACT_GATHER_INFO
2011-07-28	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-7644.nasl - Type : ACT_GATHER_INFO
2011-05-13	Name : The remote database server is affected by multiple vulnerabilities. File : oracle_rdbms_cpu_apr_2011.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_gnutls-101025.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_gnutls-101206.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-openjdk-101103.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_gnutls-101025.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_gnutls-101206.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-openjdk-101103.nasl - Type : ACT_GATHER_INFO
2011-05-02	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12705.nasl - Type : ACT_GATHER_INFO
2011-03-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_MozillaFirefox-100407.nasl - Type : ACT_GATHER_INFO
2011-03-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_mozilla-xulrunner190-100407.nasl - Type : ACT_GATHER_INFO
2011-02-14	Name : The remote VMware ESXi / ESX host is missing one or more security-related pat... File : vmware_VMSA-2011-0003.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread-7087.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread-7131.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread_ja-7086.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread_ja-7132.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_flash-player-7071.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_gnutls-7299.nasl - Type : ACT_GATHER_INFO
2011-01-27	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_6_0-sun-7204.nasl - Type : ACT_GATHER_INFO
2011-01-25	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-101220.nasl - Type : ACT_GATHER_INFO
2011-01-24	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201101-09.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing a security update. File : suse_11_java-1_4_2-ibm-100510.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_4_2-ibm-101112.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-100525.nasl - Type : ACT_GATHER_INFO
2011-01-10	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2141.nasl - Type : ACT_GATHER_INFO
2010-12-17	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12658.nasl - Type : ACT_GATHER_INFO
2010-12-16	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0987.nasl - Type : ACT_GATHER_INFO
2010-12-16	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_gnutls-101206.nasl - Type : ACT_GATHER_INFO
2010-12-08	Name : The remote VMware ESX host is missing one or more security-related patches. File : vmware_VMSA-2010-0019.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_MozillaFirefox-100406.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_acroread-100702.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_acroread-100825.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing a security update. File : suse_11_acroread_ja-100702.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing a security update. File : suse_11_acroread_ja-100825.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing a security update. File : suse_11_flash-player-100611.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing a security update. File : suse_11_flash-player-100811.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_4_2-ibm-100728.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-ibm-100610.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-sun-100331.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libfreebl3-100406.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-100331.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_mozilla-xulrunner190-100406.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-7205.nasl - Type : ACT_GATHER_INFO
2010-12-01	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12659.nasl - Type : ACT_GATHER_INFO
2010-11-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0865.nasl - Type : ACT_GATHER_INFO
2010-11-10	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_6_5.nasl - Type : ACT_GATHER_INFO
2010-11-10	Name : The remote host is missing a Mac OS X update that fixes security issues. File : macosx_SecUpd2010-007.nasl - Type : ACT_GATHER_INFO
2010-10-29	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-1010-1.nasl - Type : ACT_GATHER_INFO
2010-10-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0807.nasl - Type : ACT_GATHER_INFO
2010-10-22	Name : The remote Fedora host is missing a security update. File : fedora_2010-16240.nasl - Type : ACT_GATHER_INFO
2010-10-22	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2010-10-22	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-sun-101019.nasl - Type : ACT_GATHER_INFO
2010-10-21	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0786.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote web server is affected by multiple vulnerabilities. File : apache_2_0_64.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote web server is affected by multiple vulnerabilities File : apache_2_2_15.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote Fedora host is missing a security update. File : fedora_2010-16294.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_5_update8.nasl - Type : ACT_GATHER_INFO
2010-10-20	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_6_update3.nasl - Type : ACT_GATHER_INFO
2010-10-18	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0768.nasl - Type : ACT_GATHER_INFO
2010-10-18	Name : The remote Fedora host is missing a security update. File : fedora_2010-16312.nasl - Type : ACT_GATHER_INFO
2010-10-15	Name : The remote Windows host contains a programming platform that is affected by m... File : oracle_java_cpu_oct_2010.nasl - Type : ACT_GATHER_INFO
2010-10-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0770.nasl - Type : ACT_GATHER_INFO
2010-10-14	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0768.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-6979.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-6657.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-7077.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-nss-6978.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-xulrunner190-6971.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-6655.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-6944.nasl - Type : ACT_GATHER_INFO
2010-10-04	Name : The remote VMware ESX host is missing one or more security-related patches. File : vmware_VMSA-2010-0015.nasl - Type : ACT_GATHER_INFO
2010-09-22	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-990-1.nasl - Type : ACT_GATHER_INFO
2010-09-22	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-990-2.nasl - Type : ACT_GATHER_INFO
2010-09-17	Name : The remote web server is affected by multiple vulnerabilities. File : hpsmh_6_2_0_12.nasl - Type : ACT_GATHER_INFO
2010-09-08	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201009-05.nasl - Type : ACT_GATHER_INFO
2010-09-07	Name : The remote database server is affected by multiple vulnerabilities. File : db2_95fp6.nasl - Type : ACT_GATHER_INFO
2010-09-03	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12626.nasl - Type : ACT_GATHER_INFO
2010-09-02	Name : The remote openSUSE host is missing a security update. File : suse_11_1_acroread-100826.nasl - Type : ACT_GATHER_INFO
2010-09-02	Name : The remote openSUSE host is missing a security update. File : suse_11_2_acroread-100826.nasl - Type : ACT_GATHER_INFO
2010-08-19	Name : The version of Adobe Acrobat on the remote Windows host is affected by multip... File : adobe_acrobat_apsb10-17.nasl - Type : ACT_GATHER_INFO
2010-08-19	Name : The version of Adobe Reader on the remote Windows host is affected by multipl... File : adobe_reader_apsb10-17.nasl - Type : ACT_GATHER_INFO
2010-08-14	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_e19e74a4a71211dfb234001b2134ef46.nasl - Type : ACT_GATHER_INFO
2010-08-13	Name : The remote openSUSE host is missing a security update. File : suse_11_1_flash-player-100811.nasl - Type : ACT_GATHER_INFO
2010-08-13	Name : The remote openSUSE host is missing a security update. File : suse_11_2_flash-player-100811.nasl - Type : ACT_GATHER_INFO
2010-08-11	Name : The remote Windows host contains a version of Adobe AIR that is affected by m... File : adobe_air_apsb10-16.nasl - Type : ACT_GATHER_INFO
2010-08-11	Name : The remote Windows host contains a browser plug-in that is affected by multip... File : flash_player_apsb10-16.nasl - Type : ACT_GATHER_INFO
2010-08-11	Name : It may be possible to execute arbitrary code on the remote Windows host using... File : smb_nt_ms10-049.nasl - Type : ACT_GATHER_INFO
2010-07-30	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0574.nasl - Type : ACT_GATHER_INFO
2010-07-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0503.nasl - Type : ACT_GATHER_INFO
2010-07-26	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-927-6.nasl - Type : ACT_GATHER_INFO
2010-07-09	Name : The remote openSUSE host is missing a security update. File : suse_11_0_acroread-100708.nasl - Type : ACT_GATHER_INFO
2010-07-09	Name : The remote openSUSE host is missing a security update. File : suse_11_1_acroread-100708.nasl - Type : ACT_GATHER_INFO
2010-07-09	Name : The remote openSUSE host is missing a security update. File : suse_11_2_acroread-100706.nasl - Type : ACT_GATHER_INFO
2010-07-07	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12623.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2009-12747.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-1127.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-3905.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-3929.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-3956.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-5357.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-5942.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6025.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6039.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6131.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6279.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-8742.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-9487.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-9518.nasl - Type : ACT_GATHER_INFO
2010-06-30	Name : The version of Adobe Acrobat on the remote Windows host is affected by multip... File : adobe_acrobat_apsb10-15.nasl - Type : ACT_GATHER_INFO
2010-06-30	Name : The version of Adobe Reader on the remote Windows host is affected by multipl... File : adobe_reader_apsb10-15.nasl - Type : ACT_GATHER_INFO
2010-06-30	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-927-4.nasl - Type : ACT_GATHER_INFO
2010-06-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0489.nasl - Type : ACT_GATHER_INFO
2010-06-16	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_144e524a77eb11dfae06001b2134ef46.nasl - Type : ACT_GATHER_INFO
2010-06-15	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0471.nasl - Type : ACT_GATHER_INFO
2010-06-14	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0339.nasl - Type : ACT_GATHER_INFO
2010-06-14	Name : The remote openSUSE host is missing a security update. File : suse_11_0_flash-player-100611.nasl - Type : ACT_GATHER_INFO
2010-06-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_flash-player-100611.nasl - Type : ACT_GATHER_INFO
2010-06-14	Name : The remote openSUSE host is missing a security update. File : suse_11_2_flash-player-100611.nasl - Type : ACT_GATHER_INFO
2010-06-11	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12621.nasl - Type : ACT_GATHER_INFO
2010-06-10	Name : The remote Windows host contains a version of Adobe AIR that is affected by m... File : adobe_air_apsb10-14.nasl - Type : ACT_GATHER_INFO
2010-06-10	Name : The remote Windows host contains a browser plug-in that is affected by a code... File : flash_player_apsb10-14.nasl - Type : ACT_GATHER_INFO
2010-06-07	Name : The remote Windows host has an application installed that is affected by mult... File : openoffice_321.nasl - Type : ACT_GATHER_INFO
2010-06-04	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201006-18.nasl - Type : ACT_GATHER_INFO
2010-06-01	Name : The remote database server is affected by multiple vulnerabilities. File : db2_97fp2.nasl - Type : ACT_GATHER_INFO
2010-05-19	Name : The remote web server has multiple vulnerabilities. File : hpsmh_6_1_0_102.nasl - Type : ACT_GATHER_INFO
2010-05-19	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_5_update7.nasl - Type : ACT_GATHER_INFO
2010-05-19	Name : The remote host has a version of Java that is affected by multiple vulnerabil... File : macosx_java_10_6_update2.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0155.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0162.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0163.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0164.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0165.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0166.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0167.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0333.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0337.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0338.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0339.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0383.nasl - Type : ACT_GATHER_INFO
2010-04-30	Name : The remote openSUSE host is missing a security update. File : suse_11_0_java-1_6_0-openjdk-100428.nasl - Type : ACT_GATHER_INFO
2010-04-30	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-openjdk-100428.nasl - Type : ACT_GATHER_INFO
2010-04-30	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-openjdk-100412.nasl - Type : ACT_GATHER_INFO
2010-04-29	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-084.nasl - Type : ACT_GATHER_INFO
2010-04-28	Name : The remote database server is affected by multiple issues. File : db2_9fp9.nasl - Type : ACT_GATHER_INFO
2010-04-19	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-076.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-070.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_0_firefox35upgrade-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_0_mozilla-xulrunner190-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_MozillaFirefox-branding-openSUSE-100413.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_firefox35upgrade-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_mozilla-xulrunner190-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaFirefox-100412.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_0_libfreebl3-100407.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libfreebl3-100407.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaThunderbird-100406.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libfreebl3-100406.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_2_seamonkey-100406.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-6970.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-nspr-6977.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-xulrunner190-6976.nasl - Type : ACT_GATHER_INFO
2010-04-12	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-927-1.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0333.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-069.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_0_java-1_6_0-sun-100331.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_1_java-1_6_0-sun-100331.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libopenssl-devel-100331.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_2_java-1_6_0-sun-100331.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libopenssl-devel-100401.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-923-1.nasl - Type : ACT_GATHER_INFO
2010-04-02	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12606.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_9ccfee393c3b11df9edc000f20797ede.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_359.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a mail client that is affected by multiple v... File : mozilla_thunderbird_304.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a web browser that is affected by multiple v... File : seamonkey_204.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-6943.nasl - Type : ACT_GATHER_INFO
2010-03-30	Name : The remote Windows host contains a runtime environment that is affected by mu... File : oracle_java_cpu_mar_2010.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0162.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0164.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0165.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0166.nasl - Type : ACT_GATHER_INFO
2010-03-29	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0167.nasl - Type : ACT_GATHER_INFO
2010-03-26	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0163.nasl - Type : ACT_GATHER_INFO
2010-03-23	Name : The remote Windows host contains a web browser that is affected by Multiple V... File : mozilla_firefox_362.nasl - Type : ACT_GATHER_INFO
2010-03-11	Name : The remote web server has multiple SSL-related vulnerabilities. File : openssl_0_9_8m.nasl - Type : ACT_GATHER_INFO
2010-03-09	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2010-067-01.nasl - Type : ACT_GATHER_INFO
2010-03-04	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0130.nasl - Type : ACT_GATHER_INFO
2010-03-02	Name : The remote host contains a web browser that is affected by multiple issues. File : opera_1050.nasl - Type : ACT_GATHER_INFO
2010-02-24	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1934.nasl - Type : ACT_GATHER_INFO
2010-01-20	Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_SecUpd2010-001.nasl - Type : ACT_GATHER_INFO
2009-12-28	Name : The remote Fedora host is missing a security update. File : fedora_2009-13236.nasl - Type : ACT_GATHER_INFO
2009-12-28	Name : The remote Fedora host is missing a security update. File : fedora_2009-13250.nasl - Type : ACT_GATHER_INFO
2009-12-27	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1694.nasl - Type : ACT_GATHER_INFO
2009-12-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-337.nasl - Type : ACT_GATHER_INFO
2009-12-18	Name : The remote Fedora host is missing a security update. File : fedora_2009-12229.nasl - Type : ACT_GATHER_INFO
2009-12-18	Name : The remote Fedora host is missing a security update. File : fedora_2009-12305.nasl - Type : ACT_GATHER_INFO
2009-12-18	Name : The remote Fedora host is missing a security update. File : fedora_2009-12606.nasl - Type : ACT_GATHER_INFO
2009-12-10	Name : The remote Fedora host is missing a security update. File : fedora_2009-12604.nasl - Type : ACT_GATHER_INFO
2009-12-10	Name : The remote Fedora host is missing a security update. File : fedora_2009-12968.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Fedora host is missing a security update. File : fedora_2009-12750.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Fedora host is missing a security update. File : fedora_2009-12775.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Fedora host is missing a security update. File : fedora_2009-12782.nasl - Type : ACT_GATHER_INFO
2009-12-08	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-323.nasl - Type : ACT_GATHER_INFO
2009-12-02	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200912-01.nasl - Type : ACT_GATHER_INFO
2009-11-24	Name : The remote service allows insecure renegotiation of TLS / SSL connections. File : ssl_renegotiation.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote openSUSE host is missing a security update. File : suse_11_0_libopenssl-devel-091112.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote openSUSE host is missing a security update. File : suse_11_1_libopenssl-devel-091112.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote openSUSE host is missing a security update. File : suse_11_2_libopenssl-devel-091113.nasl - Type : ACT_GATHER_INFO
2009-11-19	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-860-1.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12550.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote openSUSE host is missing a security update. File : suse_11_0_compat-openssl097g-091113.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote openSUSE host is missing a security update. File : suse_11_1_compat-openssl097g-091113.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote openSUSE host is missing a security update. File : suse_11_2_compat-openssl097g-091113.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_compat-openssl097g-6656.nasl - Type : ACT_GATHER_INFO
2009-11-18	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_openssl-6654.nasl - Type : ACT_GATHER_INFO
2009-11-17	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2009-320-01.nasl - Type : ACT_GATHER_INFO
2009-11-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_compat-openssl097g-091113.nasl - Type : ACT_GATHER_INFO
2009-11-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_libopenssl-devel-091112.nasl - Type : ACT_GATHER_INFO
2009-11-12	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1579.nasl - Type : ACT_GATHER_INFO
2009-11-12	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2009-1580.nasl - Type : ACT_GATHER_INFO
2009-11-09	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2009-295.nasl - Type : ACT_GATHER_INFO
2009-07-21	Name : The remote openSUSE host is missing a security update. File : suse_11_0_flash-player-081107.nasl - Type : ACT_GATHER_INFO
2009-01-19	Name : The remote host is missing Sun Security Patch number 128640-30 File : solaris10_128640.nasl - Type : ACT_GATHER_INFO
2009-01-19	Name : The remote host is missing Sun Security Patch number 128641-30 File : solaris10_x86_128641.nasl - Type : ACT_GATHER_INFO
2009-01-19	Name : The remote host is missing Sun Security Patch number 128640-30 File : solaris9_128640.nasl - Type : ACT_GATHER_INFO
2009-01-19	Name : The remote host is missing Sun Security Patch number 128641-30 File : solaris9_x86_128641.nasl - Type : ACT_GATHER_INFO
2008-11-12	Name : The remote openSUSE host is missing a security update. File : suse_flash-player-5747.nasl - Type : ACT_GATHER_INFO
2008-11-12	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_flash-player-5757.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125437-22 File : solaris10_125437.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125438-22 File : solaris10_x86_125438.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125437-22 File : solaris8_125437.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125437-22 File : solaris9_125437.nasl - Type : ACT_GATHER_INFO
2007-10-12	Name : The remote host is missing Sun Security Patch number 125438-22 File : solaris9_x86_125438.nasl - Type : ACT_GATHER_INFO

Global Informations

Type	Count
CWE ID(s)	32
Oval ID(s)	149
CPE ID(s)	1823
Saint Exploit(s)	4
osvdb(s)	95
ExploitDB Exploit(s)	9
Openvas Exploit(s)	115
IAVM(s)	3
Snort® Rule(s)	41
Nessus® Exploit(s)	294

	Related
9.8	CVE-2010-0840
9.3	CVE-2010-2189
9.3	CVE-2010-2188
9.3	CVE-2010-2187
9.3	CVE-2010-2186
9.3	CVE-2010-2185
9.3	CVE-2010-2184
9.3	CVE-2010-2183
9.3	CVE-2010-2182
9.3	CVE-2010-2181
9.3	CVE-2010-2180
9.3	CVE-2010-2178
9.3	CVE-2010-2177
9.3	CVE-2010-2176
9.3	CVE-2010-2175
9.3	CVE-2010-2174
9.3	CVE-2010-2173
9.3	CVE-2010-2171
9.3	CVE-2010-2170
9.3	CVE-2010-2169
9.3	CVE-2010-2167
9.3	CVE-2010-2166
9.3	CVE-2010-2165
9.3	CVE-2010-2164
9.3	CVE-2010-2163
9.3	CVE-2010-2162
9.3	CVE-2010-2161
9.3	CVE-2010-2160
9.3	CVE-2009-3793
7.8	CVE-2010-1297
7.5	CVE-2010-0850
7.5	CVE-2010-0849
7.5	CVE-2010-0848
7.5	CVE-2010-0847
7.5	CVE-2010-0846
7.5	CVE-2010-0844
7.5	CVE-2010-0843
7.5	CVE-2010-0842
7.5	CVE-2010-0841
7.5	CVE-2010-0839
7.5	CVE-2010-0838
7.5	CVE-2010-0837
7.5	CVE-2010-0094
7.5	CVE-2010-0087
6.8	CVE-2010-0095
6.8	CVE-2010-0088
5.8	CVE-2010-0090
5.8	CVE-2009-3555
5.1	CVE-2010-0845
5.1	CVE-2010-0093
5.1	CVE-2010-0092
5.1	CVE-2010-0085
5.1	CVE-2010-0082
5	CVE-2010-0089
5	CVE-2010-0084
4.3	CVE-2010-2179
4.3	CVE-2010-2172
4.3	CVE-2010-0091
4.3	CVE-2008-4546
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 59 more Alert(s)