VID |
50031 |
Severity |
40 |
Port |
139,445 |
Protocol |
TCP |
Class |
SMB |
Detailed Description |
A version of Adobe Flash Player that is earlier than 10.3.183.43. Such version is reportedly affected by Multiple Remote Vulnerabilities.
- Several unspecified issues exist that can lead to buffer overflows and arbitrary code execution. (CVE-2012-5274, CVE-2012-5275, CVE-2012-5276, CVE-2012-5277, CVE-2012-5280) - An unspecified security bypass issue exists that can lead to arbitrary code execution. (CVE-2012-5278) - An unspecified issue exists that can lead to memory corruption and arbitrary code execution. (CVE-2012-5279)
* Note: This check requires an account with administrative privileges which can log into the host to scan. Absence of this condition will result in the check not being performed and a False Negative for all vulnerable hosts.
* References: http://www.adobe.com/support/security/bulletins/apsb12-24.html
* Platforms Affected: Adobe Flash Player prior to 10.3.183.43 Apple Mac OS X Any version Linux Any version Microsoft Windows Any version |
Recommendation |
Upgrade to the latest version of Adobe Flash Player (10.3.183.43 or later), available from the Adobe Web site at http://get.adobe.com/flashplayer/ |
Related URL |
CVE-2012-5274,CVE-2012-5275,CVE-2012-5276,CVE-2012-5277,CVE-2012-5278,CVE-2012-5279,CVE-2012-5280 (CVE) |
Related URL |
56542,56543,56544,56545,56546,56547,56554 (SecurityFocus) |
Related URL |
(ISS) |
|