Summary
This host is installed with Adobe Flash Player and is prone to multiple vulnerabilities.
Impact
Successful exploitation will allow remote attackers to execute arbitrary code or cause denial-of-service condition.
Impact Level: System/Application
Solution
Update to version 10.3.183.67 or 11.2.202.273,
For updates refer to http://www.adobe.com/products/flash.html
Insight
Multiple flaws due to,
- A flaw in the ExternalInterface ActionScript feature.
- Firefox sandbox does not restrict privileges.
- Buffer overflow in the Flash Player broker service.
Affected
Adobe Flash Player 10.3.183.61 and earlier, and 11.x to 11.2.202.270 on Linux
References
Severity
Classification
-
CVE CVE-2013-0504, CVE-2013-0643, CVE-2013-0648 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Adobe Flash Player 9.0.115.0 and earlier vulnerability (Lin)
- 3S CoDeSys CmpWebServer Multiple Vulnerabilities
- Adobe Acrobat Multiple Vulnerabilities -01 Jan 13 (Windows)
- Adobe AIR Security Bypass Vulnerability Jan14 (Mac OS X)
- Adobe Flash Player Arbitrary Code Execution Vulnerability - 01 Feb14 (Windows)