Detections
Analytics
Flash Player 9.0.159.0 / 10.0.22.87 Multiple Vulnerabilities (APSB09-01)
high Nessus Plugin ID 35742
Synopsis
The remote Windows host contains a browser plugin that is affected by multiple vulnerabilities.Description
The remote Windows host contains a version of Adobe Flash Player that is earlier than 9.0.159.0 / 10.0.22.87. Such versions are reportedly affected by multiple vulnerabilities :- A buffer overflow issue that could allow an attacker to execute arbitrary code with the privileges of the user running the application. (CVE-2009-0520)
- An input validation vulnerability that leads to a denial of service attack and could possibly allow for an attacker to execute arbitrary code. (CVE-2009-0519)
- A vulnerability in the Flash Player settings manager that could contribute to a clickjacking attack. (CVE-2009-0014)
- A vulnerability with the mouse pointer display that could contribute to a clickjacking attack. (CVE-2009-0522)
Solution
Upgrade to version 10.0.22.87 or later. If you are unable to upgrade to version 10, upgrade to version 9.0.159.0 or later.See Also
http://www.nessus.org/u?023bd92b
http://www.adobe.com/support/security/bulletins/apsb09-01.html
Plugin Details
Severity: High
ID: 35742
File Name: flash_player_apsb09_01.nasl
Version: 1.18
Type: local
Agent: windows
Family: Windows
Published: 2/26/2009
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:adobe:flash_player
Required KB Items: SMB/Flash_Player/installed
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 2/24/2009
Reference Information
CVE: CVE-2009-0114, CVE-2009-0519, CVE-2009-0520, CVE-2009-0522