Flash Player for Mac <= 188.8.131.52 Multiple Vulnerabilities (APSB14-18)
High Nessus Plugin ID 77174
SynopsisThe remote Mac OS X host has a browser plugin that is affected by multiple vulnerabilities.
DescriptionAccording to its version, the instance of Flash Player installed on the remote Mac OS X host is equal or prior to 184.108.40.206. It is, therefore, affected by the following vulnerabilities :
- A use-after-free error exists that allows code execution. (CVE-2014-0538)
- An unspecified security bypass error exists.
- Multiple errors exist related to memory leaks that can be used to bypass memory address randomization.
(CVE-2014-0540, CVE-2014-0542, CVE-2014-0543, CVE-2014-0544, CVE-2014-0545)
SolutionUpgrade to Adobe Flash Player version 220.127.116.11 or later.
Alternatively, Adobe has made version 18.104.22.168 available for those installations that cannot be upgraded to 14.x.