FreeBSD : flash -- multiple vulnerabilities (a63f2c06-726b-11e5-a12b-bcaec565249c)

This script is Copyright (C) 2015 Tenable Network Security, Inc.


Synopsis :

The remote FreeBSD host is missing one or more security-related
updates.

Description :

Adobe reports :

These updates resolve a vulnerability that could be exploited to
bypass the same-origin-policy and lead to information disclosure
(CVE-2015-7628).

These updates include a defense-in-depth feature in the Flash broker
API (CVE-2015-5569).

These updates resolve use-after-free vulnerabilities that could lead
to code execution (CVE-2015-7629, CVE-2015-7631, CVE-2015-7643,
CVE-2015-7644).

These updates resolve a buffer overflow vulnerability that could lead
to code execution (CVE-2015-7632).

These updates resolve memory corruption vulnerabilities that could
lead to code execution (CVE-2015-7625, CVE-2015-7626, CVE-2015-7627,
CVE-2015-7630, CVE-2015-7633, CVE-2015-7634).

See also :

https://helpx.adobe.com/security/products/flash-player/apsb15-25.html
http://www.nessus.org/u?cc87e7cf

Solution :

Update the affected packages.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now