This script is Copyright (C) 2007-2012 Tenable Network Security, Inc.
The remote SuSE 10 host is missing a security-related patch.
This security update brings the Adobe Flash Player to version 7.0.69.
It fixes the following security problem :
- CRLF injection vulnerability in Adobe Flash Player
allows remote attackers to modify HTTP headers of client
requests and conduct HTTP Request Splitting attacks via
CRLF sequences in arguments to the ActionScript
functions (1) XML.addRequestHeader and (2)
XML.contentType. NOTE: the flexibility of the attack
varies depending on the type of web browser being used.
See also :
Apply ZYPP patch number 2357.
Risk factor :
Medium / CVSS Base Score : 5.0