Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the h264 decoder routine. Successful exploitation could lead to arbitrary code execution.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Adobe Flash Player versions 24.0.0.194 and earlier have an exploitable heap overflow vulnerability in the     h264 decoder routine. Successful exploitation could lead to arbitrary code execution. (CVE-2017-2984)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Windows host is missing KB4010250. It is, therefore, affected by multiple vulnerabilities :

  - Multiple use-after-free errors exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-2982, CVE-2017-2985, CVE-2017-2993,     CVE-2017-2994).

  - Multiple heap buffer overflow conditions exist that     allow an unauthenticated, remote attacker to execute     arbitrary code. (CVE-2017-2984, CVE-2017-2986,     CVE-2017-2992).

  - An integer overflow condition exists that allows an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-2987).

  - Multiple memory corruption issues exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-2988, CVE-2017-2990, CVE-2017-2991,     CVE-2017-2996).

  - A type confusion error exists that allows an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-2995)

The remote host is affected by the vulnerability described in GLSA-201702-20 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

Versions of Adobe Flash Player prior to 24.0.0.221 are unpatched, and therefore affected by the following vulnerabilities :

 - An unspecified use-after-free error exists that may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code. No further details have been provided. (CVE-2017-2982, CVE-2017-2985, CVE-2017-2993)
 - An overflow condition that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to cause a heap-based buffer overflow, potentially allowing the execution of arbitrary code. (CVE-2017-2984)
 - An overflow condition exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to cause a heap-based buffer overflow, potentially allowing the execution of arbitrary code. (CVE-2017-2986, CVE-2017-2992)
 - An unspecified integer overflow condition exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to potentially execute arbitrary code. (CVE-2017-2987)
 - A flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2017-2988, CVE-2017-2990, CVE-2017-2991, CVE-2017-2996)
 - An out-of-bounds access flaw exists that is triggered during the handling of a specially crafted 'MediaPlayer' object. This may allow a context-dependent attacker to potentially execute arbitrary code. (CVE-2017-2994)
 - A type confusion flaw exists that is triggered during the handling of specially crafted 'MessageChannel' objects. This may allow a context-dependent attacker to potentially execute arbitrary code. (CVE-2017-2995)

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

This update upgrades Flash Player to version 24.0.0.221.

Security Fix(es) :

* This update fixes multiple vulnerabilities in Adobe Flash Player.
These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content.
(CVE-2017-2982, CVE-2017-2984, CVE-2017-2985, CVE-2017-2986, CVE-2017-2987, CVE-2017-2988, CVE-2017-2990, CVE-2017-2991, CVE-2017-2992, CVE-2017-2993, CVE-2017-2994, CVE-2017-2995, CVE-2017-2996)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 24.0.0.194. It is, therefore, affected by multiple vulnerabilities :

  - Multiple use-after-free errors exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-2982, CVE-2017-2985, CVE-2017-2993,     CVE-2017-2994).

  - Multiple heap buffer overflow conditions exist that     allow an unauthenticated, remote attacker to execute     arbitrary code. (CVE-2017-2984, CVE-2017-2986,     CVE-2017-2992).

  - An integer overflow condition exists that allows an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-2987).

  - Multiple memory corruption issues exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-2988, CVE-2017-2990, CVE-2017-2991,     CVE-2017-2996).

  - A type confusion error exists that allows an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-2995)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 24.0.0.194. It is, therefore, affected by multiple vulnerabilities :

  - Multiple use-after-free errors exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-2982, CVE-2017-2985, CVE-2017-2993,     CVE-2017-2994).

  - Multiple heap buffer overflow conditions exist that     allow an unauthenticated, remote attacker to execute     arbitrary code. (CVE-2017-2984, CVE-2017-2986,     CVE-2017-2992).

  - An integer overflow condition exists that allows an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-2987).

  - Multiple memory corruption issues exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-2988, CVE-2017-2990, CVE-2017-2991,     CVE-2017-2996).

  - A type confusion error exists that allows an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-2995)

ID	Name	Product	Family	Type	Severity
220878	Linux Distros Unpatched Vulnerability : CVE-2017-2984	Nessus	Misc.	Local	high
97325	MS17-005: Security Update for Adobe Flash Player (4010250)	Nessus	Windows : Microsoft Bulletins	Local	high
97263	GLSA-201702-20 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high
9966	Flash Player < 24.0.0.221 Multiple Vulnerabilities (APSB17-04)	Nessus Network Monitor	Web Clients		critical
97199	RHEL 6 : flash-plugin (RHSA-2017:0275)	Nessus	Red Hat Local Security Checks	Local	high
97143	Adobe Flash Player for Mac <= 24.0.0.194 Multiple Vulnerabilities (APSB17-04)	Nessus	MacOS X Local Security Checks	Local	high
97142	Adobe Flash Player <= 24.0.0.194 Multiple Vulnerabilities (APSB17-04)	Nessus	Windows	Local	high

Detections

Analytics

CVE-2017-2984

high

Tenable Plugins

high

high

high

critical

high

high

high