Adobe Flash Player versions 26.0.0.137 and earlier have a security bypass vulnerability that leads to information disclosure when performing URL redirect.

Versions of Adobe Flash Player prior to 26.0.0.151 are unpatched, and therefore affected by multiple vulnerabilities :

 - An information disclosure vulnerability exists due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing specially crafted Flash content, to disclose sensitive information. (CVE-2017-3085)
 - A remote code execution vulnerability exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing specially crafted Flash content, to execute arbitrary code. (CVE-2017-3106)

The remote host is affected by the vulnerability described in GLSA-201709-16 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the referenced CVE identifiers for details.
  Impact :

    A remote attacker could possibly execute arbitrary code with the       privileges of the process or bypass security restrictions.
  Workaround :

    There is no known workaround at this time.

An update for flash-plugin is now available for Red Hat Enterprise Linux 6 Supplementary.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

This update upgrades Flash Player to version 26.0.0.151.

Security Fix(es) :

* This update fixes multiple vulnerabilities in Adobe Flash Player.
These vulnerabilities, detailed in the Adobe Security Bulletin listed in the References section, could allow an attacker to create a specially crafted SWF file that would cause flash-plugin to crash, execute arbitrary code, or disclose sensitive information when the victim loaded a page containing the malicious SWF content.
(CVE-2017-3085, CVE-2017-3106)

Adobe reports :

- These updates resolve security bypass vulnerability that could lead to information disclosure (CVE-2017-3085).

- These updates resolve type confusion vulnerability that could lead to remote code execution (CVE-2017-3106).

The remote Windows host is missing security update KB4034662. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists due to an     unspecified flaw. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     website containing specially crafted Flash content, to     disclose sensitive information. (CVE-2017-3085)

  - A remote code execution vulnerability exists due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a website containing     specially crafted Flash content, to execute arbitrary     code. (CVE-2017-3106)

The version of Adobe Flash Player installed on the remote macOS or Mac OS X host is equal or prior to version 26.0.0.137. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists due to an     unspecified flaw. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     website containing specially crafted Flash content, to     disclose sensitive information. (CVE-2017-3085)

  - A remote code execution vulnerability exists due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a website containing     specially crafted Flash content, to execute arbitrary     code. (CVE-2017-3106)

The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 26.0.0.137. It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists due to an     unspecified flaw. An unauthenticated, remote attacker     can exploit this, by convincing a user to visit a     website containing specially crafted Flash content, to     disclose sensitive information. (CVE-2017-3085)

  - A remote code execution vulnerability exists due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this, by     convincing a user to visit a website containing     specially crafted Flash content, to execute arbitrary     code. (CVE-2017-3106)

ID	Name	Product	Family	Severity
700424	Flash Player < 26.0.0.151 Multiple Vulnerabilities (APSB17-23)	Nessus Network Monitor	Web Clients	high
103444	GLSA-201709-16 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
102411	RHEL 6 : flash-plugin (RHSA-2017:2457)	Nessus	Red Hat Local Security Checks	high
102331	FreeBSD : Flash Player -- multiple vulnerabilities (7e3d3e9a-7d8f-11e7-a02b-d43d7ef03aa6)	Nessus	FreeBSD Local Security Checks	high
102266	KB4034662: Security update for Adobe Flash Player (August 2017)	Nessus	Windows : Microsoft Bulletins	high
102263	Adobe Flash Player for Mac <= 26.0.0.137 Multiple Vulnerabilities (APSB17-23)	Nessus	MacOS X Local Security Checks	high
102262	Adobe Flash Player <= 26.0.0.137 Multiple Vulnerabilities (APSB17-23)	Nessus	Windows	high

Detections

Analytics

CVE-2017-3085

high

Tenable Plugins

high

critical

high

high

high

high

high