MS KB2898108: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer 10

High Nessus Plugin ID 70856


The remote host has an ActiveX control installed that is affected by memory corruption vulnerabilities.


The remote host is missing KB2898108. It is, therefore, affected by two memory corruption vulnerabilities in the installed version of the Adobe Flash ActiveX control, which could lead to code execution.


Install Microsoft KB2898108.

See Also

Plugin Details

Severity: High

ID: 70856

File Name: smb_kb2898108.nasl

Version: $Revision: 1.8 $

Type: local

Agent: windows

Family: Windows

Published: 2013/11/13

Modified: 2017/08/30

Dependencies: 13855

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 7.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:POC/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows, cpe:/a:adobe:flash_player

Required KB Items: SMB/Registry/Enumerated, SMB/WindowsVersion, SMB/ProductName

Exploit Available: true

Exploit Ease: No exploit is required

Patch Publication Date: 2013/11/12

Vulnerability Publication Date: 2013/11/12

Reference Information

CVE: CVE-2013-5329, CVE-2013-5330

BID: 63680, 63683

OSVDB: 99655, 99656

MSKB: 2898108