Detections
Analytics

FreeBSD : Macromedia flash player -- swf file handling arbitrary code (aed343b4-5480-11da-b579-001125afbed7)

high Nessus Plugin ID 21494

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

A Secunia Advisory reports :

A vulnerability has been reported in Macromedia Flash Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to missing validation of the frame type identifier that is read from a SWF file. This value is used as an index in Flash.ocx to reference an array of function pointers. This can be exploited via a specially crafted SWF file to cause the index to reference memory that is under the attacker's control, which causes Flash Player to use attacker supplied values as function pointers.

Successful exploitation allows execution of arbitrary code.

Solution

Update the affected packages.

See Also

https://www.adobe.com/devnet/security/security_zone/mpsb05-07.html

https://www.beyondtrust.com/resources/blog/research/

http://www.nessus.org/u?bddbcbe8

Plugin Details

Severity: High

ID: 21494

File Name: freebsd_pkg_aed343b4548011dab579001125afbed7.nasl

Version: 1.14

Type: local

Published: 5/13/2006

Updated: 1/6/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:linux-flashplugin6, p-cpe:/a:freebsd:freebsd:linux-flashplugin7, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 11/13/2005

Vulnerability Publication Date: 6/27/2005

Reference Information

Secunia: 17430