The version of Adobe AIR installed on the remote Mac OS X host is equal or prior to version 18.0.0.199. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified stack corruption issue exists that     allows a remote attacker to execute arbitrary code.
    (CVE-2015-5567, CVE-2015-5579)

  - A vector length corruption issue exists that allows a     remote attacker to have an unspecified impact.
    (CVE-2015-5568)

  - A use-after-free error exists in an unspecified     component due to improperly sanitized user-supplied     input. A remote attacker can exploit this, via a     specially crafted file, to deference already freed     memory and execute arbitrary code. (CVE-2015-5570,     CVE-2015-5574, CVE-2015-5581, CVE-2015-5584,     CVE-2015-6682)

  - An unspecified flaw exists due to a failure to reject     content from vulnerable JSONP callback APIs. A remote     attacker can exploit this to have an unspecified impact.
    (CVE-2015-5571)

  - An unspecified flaw exists that allows a remote attacker     to bypass security restrictions and gain access to     sensitive information. (CVE-2015-5572)

  - An unspecified type confusion flaw exists that allows a     remote attacker to execute arbitrary code.
    (CVE-2015-5573)

  - A flaw exists in an unspecified component due to     improper validation of user-supplied input when handling     a specially crafted file. A remote attacker can exploit     this to corrupt memory, resulting in a denial of service     or the execution of arbitrary code. (CVE-2015-5575,     CVE-2015-5577, CVE-2015-5578, CVE-2015-5580,     CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)

  - A memory leak issue exists that allows a remote     attacker to have an unspecified impact. (CVE-2015-5576)

  - A stack buffer overflow condition exists due to improper     validation of user-supplied input. A remote attacker can     exploit this to execute arbitrary code. (CVE-2015-5587)

  - An unspecified overflow condition exists due to improper     validation of user-supplied input. A remote attacker can     exploit this to execute arbitrary code. (CVE-2015-6676,     CVE-2015-6678)

  - An unspecified flaw exists that allows a remote attacker     to bypass same-origin policy restrictions and gain     access to sensitive information. (CVE-2015-6679)

The remote Windows host is missing KB3087040. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified stack corruption issue exists that     allows a remote attacker to execute arbitrary code.
    (CVE-2015-5567, CVE-2015-5579)

  - A vector length corruption issue exists that allows a     remote attacker to have an unspecified impact.
    (CVE-2015-5568)

  - A use-after-free error exists in an unspecified     component due to improperly sanitized user-supplied     input. A remote attacker can exploit this, via a     specially crafted file, to deference already freed     memory and execute arbitrary code. (CVE-2015-5570,     CVE-2015-5574, CVE-2015-5581, CVE-2015-5584,     CVE-2015-6682)

  - An unspecified flaw exists due to a failure to reject     content from vulnerable JSONP callback APIs. A remote     attacker can exploit this to have an unspecified impact.
    (CVE-2015-5571)

  - An unspecified flaw exists that allows a remote attacker     to bypass security restrictions and gain access to     sensitive information. (CVE-2015-5572)

  - An unspecified type confusion flaw exists that allows a     remote attacker to execute arbitrary code.
    (CVE-2015-5573)

  - A flaw exists in an unspecified component due to     improper validation of user-supplied input when handling     a specially crafted file. A remote attacker can exploit     this to corrupt memory, resulting in a denial of service     or the execution of arbitrary code. (CVE-2015-5575,     CVE-2015-5577, CVE-2015-5578, CVE-2015-5580,     CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)

  - A memory leak issue exists that allows a remote     attacker to have an unspecified impact. (CVE-2015-5576)

  - A stack buffer overflow condition exists due to improper     validation of user-supplied input. A remote attacker can     exploit this to execute arbitrary code. (CVE-2015-5587)

  - An unspecified overflow condition exists due to improper     validation of user-supplied input. A remote attacker can     exploit this to execute arbitrary code. (CVE-2015-6676,     CVE-2015-6678)

  - An unspecified flaw exists that allows a remote attacker     to bypass same-origin policy restrictions and gain     access to sensitive information. (CVE-2015-6679)

The version of Google Chrome installed on the remote Mac OS X host is prior to 45.0.2454.99. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified stack corruption issue exists that     allows a remote attacker to execute arbitrary code.
    (CVE-2015-5567, CVE-2015-5579)

  - A vector length corruption issue exists that allows a     remote attacker to have an unspecified impact.
    (CVE-2015-5568)

  - A use-after-free error exists in an unspecified     component due to improperly sanitized user-supplied     input. A remote attacker can exploit this, via a     specially crafted file, to deference already freed     memory and execute arbitrary code. (CVE-2015-5570,     CVE-2015-5574, CVE-2015-5581, CVE-2015-5584,     CVE-2015-6682)

  - An unspecified flaw exists due to a failure to reject     content from vulnerable JSONP callback APIs. A remote     attacker can exploit this to have an unspecified impact.
    (CVE-2015-5571)

  - An unspecified flaw exists that allows a remote attacker     to bypass security restrictions and gain access to     sensitive information. (CVE-2015-5572)

  - An unspecified type confusion flaw exists that allows a     remote attacker to execute arbitrary code.
    (CVE-2015-5573)

  - A flaw exists in an unspecified component due to     improper validation of user-supplied input when handling     a specially crafted file. A remote attacker can exploit     this to corrupt memory, resulting in a denial of service     or the execution of arbitrary code. (CVE-2015-5575,     CVE-2015-5577, CVE-2015-5578, CVE-2015-5580,     CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)

  - A memory leak issue exists that allows a remote     attacker to have an unspecified impact. (CVE-2015-5576)

  - A stack buffer overflow condition exists due to improper     validation of user-supplied input. A remote attacker can     exploit this to execute arbitrary code. (CVE-2015-5587)

  - An unspecified overflow condition exists due to improper     validation of user-supplied input. A remote attacker can     exploit this to execute arbitrary code. (CVE-2015-6676,     CVE-2015-6678)

  - An unspecified flaw exists that allows a remote attacker     to bypass same-origin policy restrictions and gain     access to sensitive information. (CVE-2015-6679)

Adobe Flash Player was updated to 11.2.202.521 (APSB15-23 bsc#946880) fixing several security issues :

More information can be found on :

https://helpx.adobe.com/security/products/flash-player/apsb15-23.html

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Adobe Flash Player installed on the remote Mac OS X host is equal or prior to version 18.0.0.232. It is, therefore, affected by multiple vulnerabilities :

  - An unspecified stack corruption issue exists that     allows a remote attacker to execute arbitrary code.
    (CVE-2015-5567, CVE-2015-5579)

  - A vector length corruption issue exists that allows a     remote attacker to have an unspecified impact.
    (CVE-2015-5568)

  - A use-after-free error exists in an unspecified     component due to improperly sanitized user-supplied     input. A remote attacker can exploit this, via a     specially crafted file, to deference already freed     memory and execute arbitrary code. (CVE-2015-5570,     CVE-2015-5574, CVE-2015-5581, CVE-2015-5584,     CVE-2015-6682)

  - An unspecified flaw exists due to a failure to reject     content from vulnerable JSONP callback APIs. A remote     attacker can exploit this to have an unspecified impact.
    (CVE-2015-5571)

  - An unspecified flaw exists that allows a remote attacker     to bypass security restrictions and gain access to     sensitive information. (CVE-2015-5572)

  - An unspecified type confusion flaw exists that allows a     remote attacker to execute arbitrary code.
    (CVE-2015-5573)

  - A flaw exists in an unspecified component due to     improper validation of user-supplied input when handling     a specially crafted file. A remote attacker can exploit     this to corrupt memory, resulting in a denial of service     or the execution of arbitrary code. (CVE-2015-5575,     CVE-2015-5577, CVE-2015-5578, CVE-2015-5580,     CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)

  - A memory leak issue exists that allows a remote     attacker to have an unspecified impact. (CVE-2015-5576)

  - A stack buffer overflow condition exists due to improper     validation of user-supplied input. A remote attacker can     exploit this to execute arbitrary code. (CVE-2015-5587)

  - An unspecified overflow condition exists due to improper     validation of user-supplied input. A remote attacker can     exploit this to execute arbitrary code. (CVE-2015-6676,     CVE-2015-6678)

  - An unspecified flaw exists that allows a remote attacker     to bypass same-origin policy restrictions and gain     access to sensitive information. (CVE-2015-6679)

ID	Name	Product	Family	Published	Updated	Severity
86062	Adobe AIR for Mac <= 18.0.0.199 Multiple Vulnerabilities (APSB15-23)	Nessus	MacOS X Local Security Checks	9/22/2015	11/22/2019	critical
86065	MS KB3087040: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer and Microsoft Edge	Nessus	Windows	9/22/2015	11/22/2019	critical
86064	Google Chrome < 45.0.2454.99 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	9/22/2015	11/22/2019	critical
86141	SUSE SLED11 Security Update : flash-player (SUSE-SU-2015:1614-1)	Nessus	SuSE Local Security Checks	9/25/2015	1/6/2021	critical
86063	Adobe Flash Player for Mac <= 18.0.0.232 Multiple Vulnerabilities (APSB15-23)	Nessus	MacOS X Local Security Checks	9/22/2015	11/22/2019	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical