Detections
Analytics
Flash Player < 12.0.0.77 Multiple Vulnerabilities (APSB14-08)
low Nessus Network Monitor Plugin ID 8157
Synopsis
The remote host has a browser plugin that is affected by multiple vulnerabilities.Description
Versions of Adobe Flash Player prior to 12.0.0.77 (or 11.7.700.272 for Linux users) are outdated and thus unpatched for the following vulnerabilities :- A same origin policy bypass vulnerability (CVE-2014-0503).
- Clipboard content access by an unauthorized, context-dependent attacker (CVE-2014-0504).
Solution
Upgrade to 12.0.0.77 (or 11.7.700.272 for users of older versions of Windows or OS X, who cannot upgrade to the latest major version), or later. Users of the Chrome browser should update their browser to version 33.0.1750.149, which will include the latest fix.See Also
https://helpx.adobe.com/security/products/flash-player/apsb14-08.html
Plugin Details
Severity: Low
ID: 8157
Family: Web Clients
Published: 3/13/2013
Updated: 3/6/2019
Nessus ID: 72938
Risk Information
VPR
Risk Factor: High
Score: 7.0
CVSS v2
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:N
CVSS v3
Risk Factor: Low
Base Score: 3.7
Temporal Score: 3.6
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:adobe:flash_player
Patch Publication Date: 3/11/2014
Vulnerability Publication Date: 3/11/2014
Reference Information
CVE: CVE-2014-0503, CVE-2014-0504