The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2007-009 applied. 

This update contains several security fixes for a large number of programs.

According to its version number, the instance of Flash Player on the remote Windows host contains multiple critical and as-yet unspecified vulnerabilities that could allow an attacker to take control of the affected host.  To exploit these issues, a user must load a malicious SWF file in Flash Player.

The remote host is affected by the vulnerability described in GLSA-200603-20 (Macromedia Flash Player: Arbitrary code execution)

    The Macromedia Flash Player contains multiple unspecified     vulnerabilities.
  Impact :

    An attacker serving a maliciously crafted SWF file could entice a     user to view the SWF file and execute arbitrary code on the user's     machine.
  Workaround :

    There is no known workaround at this time.

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003.

This security update contains fixes for the following applications :

AppKit ImageIO BOM CFNetwork ClamAV (Mac OS X Server only) CoreFoundation CoreGraphics Finder FTPServer Flash Player KeyCHain LaunchServices libcurl Mail MySQL Manager (Mac OS X Server only) Preview QuickDraw QuickTime Streaming Server Ruby Safari

An updated Macromedia Flash Player package that fixes a security issue is now available.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

The flash-plugin package contains a Mozilla-compatible Macromedia Flash Player browser plug-in.

Security issues were discovered in the Macromedia Flash Player. It may be possible to execute arbitrary code on a victim's machine if the victim opens a malicious Macromedia Flash file. The Common Vulnerabilities and Exposures project assigned the name CVE-2006-0024 to this issue.

Users of Macromedia Flash Player should upgrade to this updated package, which contains version 7.0.64 and is not vulnerable to this issue.

Adobe reports :

Critical vulnerabilities have been identified in Flash Player that could allow an attacker who successfully exploits these vulnerabilities to take control of the affected system. A malicious SWF must be loaded in Flash Player by the user for an attacker to exploit these vulnerabilities.

Flash Player 8 update (8.0.24.0), and Flash Player 7 update (7.0.63.0) address security vulnerabilities in previous versions of Flash Player, which could lead to the potential execution of arbitrary code. These vulnerabilities could be accessed through content delivered from a remote location via the users web browser, email client, or other applications that include or reference the Flash Player.

The remote host is using a version of curl (or libcurl) that is vulnerable to a remote buffer overflows. To exploit, an attacker would have to set up a rogue web server and entice a curl user into browsing to the malicious server.  Upon successful exploitation, the attacker would be able to execute arbitrary commands with the rights of the web server.

The remote host is running Apple Mac OS X, but lacks Security Update 2006-003. This security update contains fixes for the following applications :
AppKit
ImageIO
BOM
CFNetwork
ClamAV (Mac OS X Server only)
CoreFoundation
CoreGraphics
Finder
FTPServer
Flash Player
KeyChain
LaunchServices
libcurl
Mail
MySQL Manager (Mac OS X Server only)
Preview
QuickDraw
QuickTime Streaming Server
Ruby
Safari

The remote host is running Apple Mac OS X, but lacks Security Update 2005-009. This security update contains fixes for the following applications :
- Apache2
- Apache_mod_ssl
- CoreFoundation
- curl
- iodbcadmintool
- OpenSSL
- passwordserver
- Safari
- sudo
- syslog 

The remote host is running ClamAV, an antivirus application. There are a number of flaws that affect this version of ClamAV, and the vendor recommends upgrading to version 0.88.1 or higher. 

The remote host is using a version of curl (or libcurl) that is vulnerable to a remote buffer overflows. To exploit, an attacker would have to set up a rogue web server that would reply with a malicious NTLM authentication request.  Upon successful exploitation, the attacker would be able to execute arbitrary commands with the rights of the web server.

The remote host is using a version of wget that contains a flaw in the way that it handles NTLM authentication data.  Specifically, a rogue website that returns malformed data during an NTLM authentication session will be able to execute arbitrary code on the local client machine. 

The remote Mac OS X host is running a version of Quicktime prior to 7.1.  The remote version of Quicktime is vulnerable to various integer and buffer overflows involving specially-crafted image and media files.  An attacker may be able to leverage these issues to execute arbitrary code on the remote host by sending a malformed file to a victim and having it opened using QuickTime player.

ID	Name	Product	Family	Published	Updated	Severity
29723	Mac OS X Multiple Vulnerabilities (Security Update 2007-009)	Nessus	MacOS X Local Security Checks	12/18/2007	5/28/2024	critical
21079	Flash Player swf Processing Multiple Unspecified Code Execution (APSB06-03)	Nessus	Windows	3/15/2006	4/11/2022	medium
21127	GLSA-200603-20 : Macromedia Flash Player: Arbitrary code execution	Nessus	Gentoo Local Security Checks	3/23/2006	1/6/2021	medium
21341	Mac OS X Multiple Vulnerabilities (Security Update 2006-003)	Nessus	MacOS X Local Security Checks	5/12/2006	5/28/2024	critical
63832	RHEL 3 / 4 : flash-plugin (RHSA-2006:0268)	Nessus	Red Hat Local Security Checks	1/24/2013	1/14/2021	medium
21459	FreeBSD : linux-flashplugin -- arbitrary code execution vulnerability (83421018-b3ef-11da-a32d-000c6ec775d9)	Nessus	FreeBSD Local Security Checks	5/13/2006	1/6/2021	medium
3318	Curl < 7.15.1 Multiple Remote Overflows	Nessus Network Monitor	Web Clients	12/7/2005	3/6/2019	critical
3617	Mac OS X Multiple Vulnerabilities (Security Update 2006-003)	Nessus Network Monitor	Operating System Detection	5/12/2006	3/6/2019	medium
3308	Mac OS X Multiple Vulnerabilities (Security Update 2005-009)	Nessus Network Monitor	Operating System Detection	11/30/2005	3/6/2019	high
3505	ClamAV < 0.88.1 Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	Web Clients	8/18/2004	3/6/2019	medium
3256	Curl NTLM Buffer Overflow	Nessus Network Monitor	Web Clients	10/14/2005	3/6/2019	medium
3255	GNU WGet < 1.10.2 Buffer Overflow	Nessus Network Monitor	Web Clients	10/14/2005	3/6/2019	medium
3616	Quicktime < 7.1 on Mac OS X Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	5/12/2006	3/6/2019	high

Detections

Analytics

Plugins Search

critical

medium

medium

critical

medium

medium

critical

medium

high

medium

medium

medium

high