Flash Player < Multiple Unspecified Overflows

High Nessus Plugin ID 11323


The remote Windows host has a browser plugin that is prone to buffer overflow attacks.


The remote host has an old version of the Flash Player plugin installed.

An attacker may use this flaw to construct a malicious website with a badly-formed Flash animation that, when viewed using a vulnerable version of the software, will cause a buffer overflow and allow for arbitrary code execution subject to the plugin user's privileges.


Upgrade to version or later.

See Also


Plugin Details

Severity: High

ID: 11323

File Name: flash_player_overflows.nasl

Version: $Revision: 1.32 $

Type: local

Agent: windows

Family: Windows

Published: 2003/03/06

Modified: 2014/04/25

Dependencies: 28211

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 6.9

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:adobe:flash_player

Required KB Items: SMB/Flash_Player/installed

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2003/03/03

Reference Information

BID: 7005

OSVDB: 58970