Flash Player for Mac <= / 11.6.602.167 Multiple Vulnerabilities (APSB13-08)

critical Nessus Plugin ID 64917


The remote Mac OS X host has a browser plugin that is affected by multiple vulnerabilities.


According to its version, the instance of Flash Player installed on the remote Mac OS X host is 11.x equal or prior to 11.6.602.167, or 10.x equal or prior to It is, therefore, potentially affected by the following vulnerabilities :

- A buffer overflow error exists related to the 'broker service'. (CVE-2013-0504)

- A permissions issue exists related to the Firefox sandbox. (CVE-2013-0643)

- An unspecified error exists related to 'ExternalInterface ActionScript' feature.


Upgrade to Adobe Flash Player version / 11.6.602.171 or later.

See Also


Plugin Details

Severity: Critical

ID: 64917

File Name: macosx_flash_player_11_6_602_171.nasl

Version: 1.10

Type: local

Agent: macosx

Published: 2/27/2013

Updated: 12/4/2019

Supported Sensors: Nessus Agent, Nessus

Risk Information


Risk Factor: High

Score: 8.9


Risk Factor: Critical

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2013-0504

Vulnerability Information

CPE: cpe:/a:adobe:flash_player

Required KB Items: MacOSX/Flash_Player/Version

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2/26/2013

Vulnerability Publication Date: 2/26/2013

Reference Information

CVE: CVE-2013-0504, CVE-2013-0643, CVE-2013-0648

BID: 58184, 58185, 58186