FreeBSD : flash -- remote code execution (de6d01d5-9c44-11e6-ba67-0011d823eebd)

This script is Copyright (C) 2016 Tenable Network Security, Inc.


Synopsis :

The remote FreeBSD host is missing one or more security-related
updates.

Description :

Adobe reports :

Adobe has released security updates for Adobe Flash Player for
Windows, Macintosh, Linux and Chrome OS. These updates address a
critical vulnerability that could potentially allow an attacker to
take control of the affected system.

Adobe is aware of a report that an exploit for CVE-2016-7855 exists in
the wild, and is being used in limited, targeted attacks against users
running Windows versions 7, 8.1 and 10.

See also :

https://helpx.adobe.com/security/products/flash-player/apsb16-36.html
http://www.nessus.org/u?a1131e0f

Solution :

Update the affected packages.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
Public Exploit Available : true

Family: FreeBSD Local Security Checks

Nessus Plugin ID: 94347 ()

Bugtraq ID:

CVE ID: CVE-2016-7855

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now