10 - RHSA-2011:1144

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	flash-plugin security update

Informations
Name	RHSA-2011:1144	First vendor Publication	2011-08-10
Vendor	RedHat	Last vendor Modification	2011-08-10
Severity (Vendor)	Critical	Revision	01

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6 Supplementary.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux Desktop Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Desktop Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 5) - i386, x86_64 Red Hat Enterprise Linux Server Supplementary (v. 6) - i386, x86_64 Red Hat Enterprise Linux Workstation Supplementary (v. 6) - i386, x86_64

3. Description:

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

This update fixes multiple vulnerabilities in Adobe Flash Player. These vulnerabilities are detailed on the Adobe security page APSB11-21, listed in the References section.

Multiple security flaws were found in the way flash-plugin displayed certain SWF content. An attacker could use these flaws to create a specially-crafted SWF file that would cause flash-plugin to crash or, potentially, execute arbitrary code when the victim loaded a page containing the specially-crafted SWF content. (CVE-2011-2130, CVE-2011-2134, CVE-2011-2135, CVE-2011-2136, CVE-2011-2137, CVE-2011-2138, CVE-2011-2139, CVE-2011-2140, CVE-2011-2414, CVE-2011-2415, CVE-2011-2416, CVE-2011-2417, CVE-2011-2425)

All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 10.3.183.5.

4. Solution:

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

729497 - CVE-2011-2130 CVE-2011-2134 CVE-2011-2135 CVE-2011-2136 CVE-2011-2137 CVE-2011-2138 CVE-2011-2139 CVE-2011-2140 CVE-2011-2414 CVE-2011-2415 CVE-2011-2416 CVE-2011-2417 CVE-2011-2425 flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2011-1144.html

CWE : Common Weakness Enumeration

%	Id	Name
71 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
21 %	CWE-189	Numeric Errors (CWE/SANS Top 25)
7 %	CWE-264	Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:13940

Oval ID:	oval:org.mitre.oval:def:13940
Title:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2414.
Description:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2414.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2415	Version:	27
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:13979

Oval ID:	oval:org.mitre.oval:def:13979
Title:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.
Description:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2134	Version:	27
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:14015

Oval ID:	oval:org.mitre.oval:def:14015
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2417	Version:	27
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:14016

Oval ID:	oval:org.mitre.oval:def:14016
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2140, CVE-2011-2417, and CVE-2011-2425.
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2140, CVE-2011-2417, and CVE-2011-2425.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2135	Version:	27
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:14043

Oval ID:	oval:org.mitre.oval:def:14043
Title:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2415.
Description:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2415.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2414	Version:	27
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:14073

Oval ID:	oval:org.mitre.oval:def:14073
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2425	Version:	26
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:14074

Oval ID:	oval:org.mitre.oval:def:14074
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2140	Version:	26
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:14085

Oval ID:	oval:org.mitre.oval:def:14085
Title:	Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2416.
Description:	Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2416.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2138	Version:	26
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:14111

Oval ID:	oval:org.mitre.oval:def:14111
Title:	Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2138 and CVE-2011-2416.
Description:	Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2138 and CVE-2011-2416.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2136	Version:	26
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:14132

Oval ID:	oval:org.mitre.oval:def:14132
Title:	Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2138.
Description:	Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2138.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2416	Version:	26
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:14194

Oval ID:	oval:org.mitre.oval:def:14194
Title:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2134, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.
Description:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2134, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2130	Version:	26
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:14199

Oval ID:	oval:org.mitre.oval:def:14199
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2424	Version:	23
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7.1 Adobe AIR is installed AND _ OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:14204

Oval ID:	oval:org.mitre.oval:def:14204
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2139	Version:	26
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:14206

Oval ID:	oval:org.mitre.oval:def:14206
Title:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2414, and CVE-2011-2415.
Description:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2414, and CVE-2011-2415.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2137	Version:	26
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal 10.3.181.34 Adobe Flash Player 10 is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 7.2 OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79 OR Determine if the version of Adobe Air is less than or equal 1.5.3 Adobe AIR is installed AND _ OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal 2.7 OR Flash.ocx section ActiveX Control is installed AND Flash.ocx versions section Determine if the version of Flash.ocx is less than or equal 10.3.181.34 AND Determine if the version of Flash.ocx is less than or equal 9.125.0 AND Determine if the version of Flash.ocx is less than or equal 7.2 AND Determine if the version of Flash.ocx is less than or equal 6.0.79 AND Determine if the version of Flash.ocx is less than or equal 8.0.42.0

Definition Id: oval:org.mitre.oval:def:15475

Oval ID:	oval:org.mitre.oval:def:15475
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2425	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:15869

Oval ID:	oval:org.mitre.oval:def:15869
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2424	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:15889

Oval ID:	oval:org.mitre.oval:def:15889
Title:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2415.
Description:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2415.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2414	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:15941

Oval ID:	oval:org.mitre.oval:def:15941
Title:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.
Description:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2134	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:15998

Oval ID:	oval:org.mitre.oval:def:15998
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2417	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:16025

Oval ID:	oval:org.mitre.oval:def:16025
Title:	Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2138.
Description:	Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2138.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2416	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:16030

Oval ID:	oval:org.mitre.oval:def:16030
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2139	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:16061

Oval ID:	oval:org.mitre.oval:def:16061
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2140, CVE-2011-2417, and CVE-2011-2425.
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2140, CVE-2011-2417, and CVE-2011-2425.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2135	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:16070

Oval ID:	oval:org.mitre.oval:def:16070
Title:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2414.
Description:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2414.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2415	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:16104

Oval ID:	oval:org.mitre.oval:def:16104
Title:	Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2416.
Description:	Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2136 and CVE-2011-2416.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2138	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:16128

Oval ID:	oval:org.mitre.oval:def:16128
Title:	Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2138 and CVE-2011-2416.
Description:	Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2138 and CVE-2011-2416.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2136	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:16195

Oval ID:	oval:org.mitre.oval:def:16195
Title:	DEPRECATED: Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2140	Version:	4
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:16210

Oval ID:	oval:org.mitre.oval:def:16210
Title:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2134, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.
Description:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2134, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2130	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:16270

Oval ID:	oval:org.mitre.oval:def:16270
Title:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2414, and CVE-2011-2415.
Description:	Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2414, and CVE-2011-2415.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2137	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:21984

Oval ID:	oval:org.mitre.oval:def:21984
Title:	RHSA-2011:1144: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.
Family:	unix	Class:	patch
Reference(s):	RHSA-2011:1144-01 CVE-2011-2130 CVE-2011-2134 CVE-2011-2135 CVE-2011-2136 CVE-2011-2137 CVE-2011-2138 CVE-2011-2139 CVE-2011-2140 CVE-2011-2414 CVE-2011-2415 CVE-2011-2416 CVE-2011-2417 CVE-2011-2424 CVE-2011-2425	Version:	185
Platform(s):	Red Hat Enterprise Linux 5 Red Hat Enterprise Linux 6	Product(s):	flash-plugin
Definition Synopsis:
Operation system section The operating system installed on the system is Red Hat Enterprise Linux 5 AND flash-plugin is earlier than 0:10.3.183.5-1.el5 AND Operation system section flash-plugin is earlier than 0:10.3.183.5-1.el6 AND The operating system installed on the system is Red Hat Enterprise Linux 6

Definition Id: oval:org.mitre.oval:def:23355

Oval ID:	oval:org.mitre.oval:def:23355
Title:	DEPRECATED: ELSA-2011:1144: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1144-01 CVE-2011-2130 CVE-2011-2134 CVE-2011-2135 CVE-2011-2136 CVE-2011-2137 CVE-2011-2138 CVE-2011-2139 CVE-2011-2140 CVE-2011-2414 CVE-2011-2415 CVE-2011-2416 CVE-2011-2417 CVE-2011-2424 CVE-2011-2425	Version:	62
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
rpm test Oracle Linux 5.x AND flash-plugin is earlier than 0:10.3.183.5-1.el5 OR rpm test flash-plugin is earlier than 0:10.3.183.5-1.el6 AND Oracle Linux 6.x

Definition Id: oval:org.mitre.oval:def:23730

Oval ID:	oval:org.mitre.oval:def:23730
Title:	ELSA-2011:1144: flash-plugin security update (Critical)
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.
Family:	unix	Class:	patch
Reference(s):	ELSA-2011:1144-01 CVE-2011-2130 CVE-2011-2134 CVE-2011-2135 CVE-2011-2136 CVE-2011-2137 CVE-2011-2138 CVE-2011-2139 CVE-2011-2140 CVE-2011-2414 CVE-2011-2415 CVE-2011-2416 CVE-2011-2417 CVE-2011-2424 CVE-2011-2425	Version:	61
Platform(s):	Oracle Linux 5 Oracle Linux 6	Product(s):	flash-plugin
Definition Synopsis:
rpm test Oracle Linux 5.x AND flash-plugin is earlier than 0:10.3.183.5-1.el5 OR rpm test flash-plugin is earlier than 0:10.3.183.5-1.el6 AND Oracle Linux 6.x

CPE : Common Platform Enumeration

Type	Description	Count
Application	Adobe Adobe Air cpe:2.3:a:adobe:adobe_air:2.7.1:::::::* cpe:2.3:a:adobe:adobe_air:2.7.0.19530:::::::* cpe:2.3:a:adobe:adobe_air:2.7.0.1953:::::::* cpe:2.3:a:adobe:adobe_air:2.7.0.19480:::::::* cpe:2.3:a:adobe:adobe_air:2.7.0.1948:::::::* cpe:2.3:a:adobe:adobe_air:2.7:::::::* cpe:2.3:a:adobe:adobe_air:2.6.0.19140:::::::* cpe:2.3:a:adobe:adobe_air:2.6.0.19120:::::::* cpe:2.3:a:adobe:adobe_air:2.6:::::::* cpe:2.3:a:adobe:adobe_air:2.5.1.17730:::::::* cpe:2.3:a:adobe:adobe_air:2.5.0.16600:::::::* cpe:2.3:a:adobe:adobe_air:2.0.4:::::::* cpe:2.3:a:adobe:adobe_air:2.0.3.13070:::::::* cpe:2.3:a:adobe:adobe_air:2.0.3:::::::* cpe:2.3:a:adobe:adobe_air:2.0.2.12610:::::::* cpe:2.3:a:adobe:adobe_air:2.0.2:::::::* cpe:2.3:a:adobe:adobe_air:1.5.3.9130:::::::* cpe:2.3:a:adobe:adobe_air:1.5.3.9120:::::::* cpe:2.3:a:adobe:adobe_air:1.5.3:::::::* cpe:2.3:a:adobe:adobe_air:1.5.2:::::::* cpe:2.3:a:adobe:adobe_air:1.5.1.8210:::::::* cpe:2.3:a:adobe:adobe_air:1.5.1:::::::* cpe:2.3:a:adobe:adobe_air:1.5.0.7220:::::::* cpe:2.3:a:adobe:adobe_air:1.5:::::::* cpe:2.3:a:adobe:adobe_air:1.1.0.5790:::::::* cpe:2.3:a:adobe:adobe_air:1.1:::::::* cpe:2.3:a:adobe:adobe_air:1.0.8.4990:::::::* cpe:2.3:a:adobe:adobe_air:1.0.4990:::::::* cpe:2.3:a:adobe:adobe_air:1.0.1:::::::* cpe:2.3:a:adobe:adobe_air:1.0:::::::* cpe:2.3:a:adobe:adobe_air:::::::: cpe:2.3:a:adobe:adobe_air:-:::::::*	32
Application	Adobe Flash Player cpe:2.3:a:adobe:flash_player:10.3.185.25:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.24:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.22:::::::* cpe:2.3:a:adobe:flash_player:10.3.185.21:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.86:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.75:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.7:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.68:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.67:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.63:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.61:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.51:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.50:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.5:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.48:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.43:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.29:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.25:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.20:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.19:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.18:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.16:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.15:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.11:::::::* cpe:2.3:a:adobe:flash_player:10.3.183.10:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.36:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.34:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.26:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.23:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.22:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.16:::::::* cpe:2.3:a:adobe:flash_player:10.3.181.14:::::::* cpe:2.3:a:adobe:flash_player:10.3.:::::::* cpe:2.3:a:adobe:flash_player:10.3:::::::* cpe:2.3:a:adobe:flash_player:10.2.159.1:::::::* cpe:2.3:a:adobe:flash_player:10.2.157.51:::::::* cpe:2.3:a:adobe:flash_player:10.2.156.12:::::::* cpe:2.3:a:adobe:flash_player:10.2.154.25:::::::* cpe:2.3:a:adobe:flash_player:10.2.154.13:::::::* cpe:2.3:a:adobe:flash_player:10.2.153.1:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.33:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.32:::::::* cpe:2.3:a:adobe:flash_player:10.2.152.26:::::::* cpe:2.3:a:adobe:flash_player:10.2.152:::::::* cpe:2.3:a:adobe:flash_player:10.1.95.2:::::::* cpe:2.3:a:adobe:flash_player:10.1.95.1:::::::* cpe:2.3:a:adobe:flash_player:10.1.92.8:::::::* cpe:2.3:a:adobe:flash_player:10.1.92.10:::::::* cpe:2.3:a:adobe:flash_player:10.1.85.3:::::::* cpe:2.3:a:adobe:flash_player:10.1.82.76:::::::* cpe:2.3:a:adobe:flash_player:10.1.53.64:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.15:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.14.1:::::::* cpe:2.3:a:adobe:flash_player:10.1.52.14:::::::* cpe:2.3:a:adobe:flash_player:10.1.106.17:::::::* cpe:2.3:a:adobe:flash_player:10.1.106.16:::::::* cpe:2.3:a:adobe:flash_player:10.1.105.6:::::::* cpe:2.3:a:adobe:flash_player:10.1.102.64:::::::* cpe:2.3:a:adobe:flash_player:10.1:::::::* cpe:2.3:a:adobe:flash_player:10.0.45.2:::::::* cpe:2.3:a:adobe:flash_player:10.0.42.34:::::::* cpe:2.3:a:adobe:flash_player:10.0.32.18:::::::* cpe:2.3:a:adobe:flash_player:10.0.22.87:::::::* cpe:2.3:a:adobe:flash_player:10.0.2.54:::::::* cpe:2.3:a:adobe:flash_player:10.0.15.3:::::::* cpe:2.3:a:adobe:flash_player:10.0.12.36:::::::* cpe:2.3:a:adobe:flash_player:10.0.12.10:::::::* cpe:2.3:a:adobe:flash_player:10.0.0.584:::::::* cpe:2.3:a:adobe:flash_player:10:::::::* cpe:2.3:a:adobe:flash_player:9.125.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.9.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.8.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.48.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.47.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.45.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.31.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.31:::::::* cpe:2.3:a:adobe:flash_player:9.0.283.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.280:::::::* cpe:2.3:a:adobe:flash_player:9.0.28.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.28.0::mac_os_x::::: cpe:2.3:a:adobe:flash_player:9.0.28:::::::* cpe:2.3:a:adobe:flash_player:9.0.277.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.262.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.260.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.246.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.20.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.20:::::::* cpe:2.3:a:adobe:flash_player:9.0.18d60:::::::* cpe:2.3:a:adobe:flash_player:9.0.16.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.16:::::::* cpe:2.3:a:adobe:flash_player:9.0.16::windows::::: cpe:2.3:a:adobe:flash_player:9.0.159.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.155.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.152.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.151.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.125.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.124.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.115.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.114.0:::::::* cpe:2.3:a:adobe:flash_player:9.0.112.0:::::::* cpe:2.3:a:adobe:flash_player:9.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.42.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.39.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.35.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.34.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.33.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.24.0:::::::* cpe:2.3:a:adobe:flash_player:8.0.22.0:::::::* cpe:2.3:a:adobe:flash_player:8.0:::::::* cpe:2.3:a:adobe:flash_player:8.0::pro::::: cpe:2.3:a:adobe:flash_player:8.0::basic::::: cpe:2.3:a:adobe:flash_player:8::professional::::: cpe:2.3:a:adobe:flash_player:8::pro::::: cpe:2.3:a:adobe:flash_player:7.2:::::::* cpe:2.3:a:adobe:flash_player:7.1.1:::::::* cpe:2.3:a:adobe:flash_player:7.1:::::::* cpe:2.3:a:adobe:flash_player:7.0.73.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.70.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.69.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.68.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.67.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.66.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.63:::::::* cpe:2.3:a:adobe:flash_player:7.0.63::linux::::: cpe:2.3:a:adobe:flash_player:7.0.61.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.60.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.53.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.25:::::::* cpe:2.3:a:adobe:flash_player:7.0.24.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.19.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.14.0:::::::* cpe:2.3:a:adobe:flash_player:7.0.1:::::::* cpe:2.3:a:adobe:flash_player:7.0_r67::solaris::::: cpe:2.3:a:adobe:flash_player:7.0_r67:::::::* cpe:2.3:a:adobe:flash_player:7.0:::::::* cpe:2.3:a:adobe:flash_player:6.0.79:::::::* cpe:2.3:a:adobe:flash_player:6.0.21.0:::::::* cpe:2.3:a:adobe:flash_player:6:::::::* cpe:2.3:a:adobe:flash_player:5:::::::* cpe:2.3:a:adobe:flash_player:4:::::::* cpe:2.3:a:adobe:flash_player:3:::::::* cpe:2.3:a:adobe:flash_player:2:::::::* cpe:2.3:a:adobe:flash_player:mx_2004:::::::* cpe:2.3:a:adobe:flash_player:cs4::pro::::: cpe:2.3:a:adobe:flash_player:cs3::pro::::: cpe:2.3:a:adobe:flash_player:cs3::professional::::: cpe:2.3:a:adobe:flash_player:::::::: cpe:2.3:a:adobe:flash_player:::basic:::::* cpe:2.3:a:adobe:flash_player:::pro:::::* cpe:2.3:a:adobe:flash_player::::::edge::* cpe:2.3:a:adobe:flash_player::::::internet_explorer_11::* cpe:2.3:a:adobe:flash_player::::::chrome::* cpe:2.3:a:adobe:flash_player:-:::::::*	156

SAINT Exploits

Description	Link
Adobe Flash Player MP4 Sequence Parameter Set Processing	More info here

ExploitDB Exploits

id	Description
2012-02-10	Adobe Flash Player MP4 SequenceParameterSetNALUnit Buffer Overflow
2012-01-31	Adobe Flash Player MP4 SequenceParameterSetNALUnit Remote Code Execution Exploit

OpenVAS Exploits

Date	Description
2012-02-12	Name : Gentoo Security Advisory GLSA 201110-11 (Adobe Flash Player) File : nvt/glsa_201110_11.nasl
2012-02-12	Name : Gentoo Security Advisory GLSA 201201-19 (acroread) File : nvt/glsa_201201_19.nasl
2011-09-21	Name : FreeBSD Ports: linux-flashplugin File : nvt/freebsd_linux-flashplugin18.nasl
2011-08-31	Name : Adobe Flash Player Multiple Vulnerabilities August-2011 (Linux) File : nvt/secpod_adobe_flash_player_mult_vuln_aug11_lin.nasl
2011-08-31	Name : Adobe Air and Flash Player Multiple Vulnerabilities August-2011 (Windows) File : nvt/secpod_adobe_prdts_mult_vuln_aug11_win.nasl
2011-08-31	Name : Adobe Air and Flash Player Multiple Vulnerabilities (Mac OS X) File : nvt/secpod_adobe_prdts_mult_vuln_macosx.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
75201	Adobe Flash Player SWF File Handling Arbitrary Code Execution (400 Taviso Bugs)
74444	Adobe Flash Player Unspecified Memory Corruption (2011-2425) A memory corruption flaw exists in Adobe Flash Player. The program fails to sanitize user-supplied input, resulting in memory corruption. With a specially crafted file, a context-dependent attacker can execute arbitrary code.
74443	Adobe Flash Player Unspecified Memory Corruption (2011-2417) A memory corruption flaw exists in Adobe Flash Player. The program fails to sanitize user-supplied input, resulting in memory corruption. With a specially crafted file, a context-dependent attacker can execute arbitrary code.
74442	Adobe Flash Player Unspecified Overflow (2011-2416) Adobe Flash Player is prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in an integer overflow. With a specially crafted file, a context-dependent attacker can potentially execute arbitrary code.
74441	Adobe Flash Player Unspecified Overflow (2011-2415) Adobe Flash Player is prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted file, a context-dependent attacker can potentially execute arbitrary code.
74440	Adobe Flash Player Unspecified Overflow (2011-2414) Adobe Flash Player is prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted file, a context-dependent attacker can potentially execute arbitrary code.
74439	Adobe Flash Player Unspecified Memory Corruption (2011-2140) A memory corruption flaw exists in Adobe Flash Player. The program fails to sanitize user-supplied input, resulting in memory corruption. With a specially crafted file, a context-dependent attacker can execute arbitrary code.
74438	Adobe Flash Player Unspecified Cross-domain Information Disclosure
74437	Adobe Flash Player BitmapData.scroll Handling Remote Overflow Adobe Flash Player is prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in an integer overflow. With a specially crafted file, a context-dependent attacker can potentially execute arbitrary code.
74436	Adobe Flash Player Unspecified Overflow (2011-2137) Adobe Flash Player is prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted file, a context-dependent attacker can potentially execute arbitrary code.
74435	Adobe Flash Player Unspecified Overflow (2011-2136) Adobe Flash Player is prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in an integer overflow. With a specially crafted file, a context-dependent attacker can potentially execute arbitrary code.
74434	Adobe Flash Player flash.display Memory Corruption A memory corruption flaw exists in Adobe Flash Player. The program fails to sanitize user-supplied input, resulting in memory corruption. With a specially crafted file, a context-dependent attacker can execute arbitrary code.
74433	Adobe Flash Player Unspecified Overflow (2011-2134) Adobe Flash Player is prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted file, a context-dependent attacker can potentially execute arbitrary code.
74432	Adobe Flash Player Unspecified Overflow (2011-2130) Adobe Flash Player is prone to an overflow condition. The program fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted file, a context-dependent attacker can potentially execute arbitrary code.

Information Assurance Vulnerability Management (IAVM)

Date	Description
2012-05-03	IAVM : 2012-B-0048 - Multiple Vulnerabilities in HP Systems Insight Manager Severity : Category I - VMSKEY : V0032178

Snort® IPS/IDS

Date	Description
2014-03-27	Adobe Flash regular expression grouping depth buffer overflow attempt RuleID : 29934 - Revision : 4 - Type : FILE-FLASH
2014-01-10	Gong Da exploit kit possible jar download RuleID : 27706 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Gong Da exploit kit Java exploit requested RuleID : 27705 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Gong Da exploit kit Java exploit requested RuleID : 27704 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Gong Da exploit kit plugin detection RuleID : 27703 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Gong Da exploit kit landing page RuleID : 27702 - Revision : 3 - Type : EXPLOIT-KIT
2014-01-10	Gong Da Jar file download RuleID : 27701 - Revision : 2 - Type : EXPLOIT-KIT
2014-01-10	Gong Da exploit kit redirection page received RuleID : 26013 - Revision : 4 - Type : EXPLOIT-KIT
2014-01-10	Adobe Flash Player ActionScript 3 integer overflow attempt RuleID : 25835 - Revision : 7 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player MP4 sequence parameter set parsing overflow attempt RuleID : 24672 - Revision : 8 - Type : FILE-MULTIMEDIA
2014-01-10	Adobe Flash Player MP4 sequence parameter set parsing overflow attempt RuleID : 23098 - Revision : 11 - Type : FILE-MULTIMEDIA
2014-01-10	Phoenix exploit kit post-compromise behavior RuleID : 21860 - Revision : 5 - Type : MALWARE-CNC
2014-01-10	Phoenix exploit kit landing page RuleID : 21640 - Revision : 6 - Type : EXPLOIT-KIT
2014-01-10	Yang Pack yg.htm landing page RuleID : 21006 - Revision : 5 - Type : MALWARE-CNC
2014-01-10	Adobe Flash MP4 ref_frame allocated buffer overflow attempt RuleID : 20555 - Revision : 11 - Type : FILE-FLASH
2014-01-10	Adobe Flash Speex-encoded audio buffer underflow attempt RuleID : 20181 - Revision : 7 - Type : FILE-FLASH
2014-01-10	Adobe Flash MP4 ref_frame allocated buffer overflow attempt RuleID : 19693 - Revision : 10 - Type : FILE-FLASH
2014-01-10	Adobe Flash cross-site request forgery attempt RuleID : 19692 - Revision : 11 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player ActionScript File reference buffer overflow attempt RuleID : 19691 - Revision : 12 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player ActionScript duplicateDoorInputArguments stack overwrite RuleID : 19690 - Revision : 12 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player ActionScript dynamic calculation double-free attempt RuleID : 19689 - Revision : 12 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player ActionScript BitmapData buffer overflow attempt RuleID : 19688 - Revision : 12 - Type : FILE-FLASH
2014-01-10	Adobe Flash ActionStoreRegister instruction length invalidation attempt RuleID : 19687 - Revision : 17 - Type : FILE-FLASH
2014-01-10	Adobe Flash uninitialized bitmap structure memory corruption attempt RuleID : 19686 - Revision : 11 - Type : FILE-FLASH
2014-01-10	Adobe Flash regular expression grouping depth buffer overflow attempt RuleID : 19685 - Revision : 13 - Type : FILE-FLASH
2014-01-10	Adobe CFF font storage memory corruption attempt RuleID : 19684 - Revision : 12 - Type : FILE-OTHER
2014-01-10	Adobe Flash Player ActionScript 3 buffer overflow attempt RuleID : 19683 - Revision : 13 - Type : FILE-FLASH
2014-01-10	Adobe Flash Player ActionScript 3 integer overflow attempt RuleID : 19682 - Revision : 14 - Type : FILE-FLASH

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_flash-player-110810.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_4_flash-player-110810.nasl - Type : ACT_GATHER_INFO
2012-06-15	Name : The remote Windows host contains software that is affected by multiple vulner... File : hp_systems_insight_manager_700_multiple_vulns.nasl - Type : ACT_GATHER_INFO
2012-01-31	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201201-19.nasl - Type : ACT_GATHER_INFO
2011-12-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_flash-player-7679.nasl - Type : ACT_GATHER_INFO
2011-11-09	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2011-1434.nasl - Type : ACT_GATHER_INFO
2011-10-14	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201110-11.nasl - Type : ACT_GATHER_INFO
2011-09-14	Name : The version of Adobe Acrobat on the remote Windows host is affected by multip... File : adobe_acrobat_apsb11-24.nasl - Type : ACT_GATHER_INFO
2011-09-14	Name : The version of Adobe Reader on the remote Windows host is affected by multipl... File : adobe_reader_apsb11-24.nasl - Type : ACT_GATHER_INFO
2011-09-14	Name : The version of Adobe Reader on the remote Mac OS X host is affected by multip... File : macosx_adobe_reader_apsb11-24.nasl - Type : ACT_GATHER_INFO
2011-08-12	Name : The remote SuSE 11 host is missing a security update. File : suse_11_flash-player-110810.nasl - Type : ACT_GATHER_INFO
2011-08-11	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_2c12ae0cc38d11e08eb7001b2134ef46.nasl - Type : ACT_GATHER_INFO
2011-08-11	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2011-1144.nasl - Type : ACT_GATHER_INFO
2011-08-10	Name : The remote Windows host contains a version of Adobe AIR that is affected by m... File : adobe_air_apsb11-21.nasl - Type : ACT_GATHER_INFO
2011-08-10	Name : A browser plugin is affected by multiple vulnerabilities. File : flash_player_apsb11-21.nasl - Type : ACT_GATHER_INFO
2011-08-10	Name : The remote Mac OS X host has a browser plugin that is affected by multiple vu... File : macosx_flash_player_10_3_183_5.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:54:58	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	14
Oval ID(s)	31
CPE ID(s)	188
Saint Exploit(s)	1
osvdb(s)	14
ExploitDB Exploit(s)	2
Openvas Exploit(s)	6
IAVM(s)	1
Snort® Rule(s)	28
Nessus® Exploit(s)	16

	Related
10	CVE-2011-2425
10	CVE-2011-2417
10	CVE-2011-2416
10	CVE-2011-2415
10	CVE-2011-2414
10	CVE-2011-2140
10	CVE-2011-2138
10	CVE-2011-2137
10	CVE-2011-2136
10	CVE-2011-2135
10	CVE-2011-2134
10	CVE-2011-2130
9.3	CVE-2011-2424
6.4	CVE-2011-2139
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 14 more Alert(s)