SuSE 10 Security Update : flash-player (ZYPP Patch Number 2357)

This script is Copyright (C) 2007-2012 Tenable Network Security, Inc.


Synopsis :

The remote SuSE 10 host is missing a security-related patch.

Description :

This security update brings the Adobe Flash Player to version 7.0.69.
It fixes the following security problem :

- CRLF injection vulnerability in Adobe Flash Player
allows remote attackers to modify HTTP headers of client
requests and conduct HTTP Request Splitting attacks via
CRLF sequences in arguments to the ActionScript
functions (1) XML.addRequestHeader and (2)
XML.contentType. NOTE: the flexibility of the attack
varies depending on the type of web browser being used.
(CVE-2006-5330)

See also :

http://support.novell.com/security/cve/CVE-2006-5330.html

Solution :

Apply ZYPP patch number 2357.

Risk factor :

Medium / CVSS Base Score : 5.0
(CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:N)

Family: SuSE Local Security Checks

Nessus Plugin ID: 29433 ()

Bugtraq ID:

CVE ID: CVE-2006-5330

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now