Specially crafted swf files could cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute code on the victim's machine (CVE-2009-0519, CVE-2009-0520, CVE-2009-0114, CVE-2009-0521).

Specially crafted swf files could cause a buffer overflow in flash-player. Attackers could potentially exploit that to execute code on the victim's machine. (CVE-2009-0519 / CVE-2009-0520 / CVE-2009-0114 / CVE-2009-0521)

The remote host is running a version of Mac OS X 10.4 that does not have Security Update 2009-002 applied.

This security update contains fixes for the following products :

  - Apache
  - ATS
  - BIND
  - CoreGraphics
  - Cscope
  - CUPS
  - Disk Images
  - enscript
  - Flash Player plug-in
  - Help Viewer
  - IPSec
  - Kerberos
  - Launch Services
  - libxml
  - Net-SNMP
  - Network Time
  - OpenSSL
  - QuickDraw Manager
  - Spotlight
  - system_cmds
  - telnet
  - Terminal
  - X11

The remote host is running a version of Mac OS X 10.5.x that is prior to 10.5.7. 

Mac OS X 10.5.7 contains security fixes for the following products :

  - Apache
  - ATS
  - BIND
  - CFNetwork
  - CoreGraphics
  - Cscope
  - CUPS
  - Disk Images
  - enscript
  - Flash Player plug-in
  - Help Viewer
  - iChat
  - International Components for Unicode
  - IPSec
  - Kerberos
  - Kernel
  - Launch Services
  - libxml
  - Net-SNMP
  - Network Time
  - Networking
  - OpenSSL
  - PHP
  - QuickDraw Manager
  - ruby
  - Safari
  - Spotlight
  - system_cmds
  - telnet
  - Terminal
  - WebKit
  - X11

The remote Windows host contains a version of Adobe Flash Player that is earlier than 9.0.159.0 / 10.0.22.87. Such versions are reportedly affected by multiple vulnerabilities : 

  - A buffer overflow issue that could allow an attacker     to execute arbitrary code with the privileges of the     user running the application. (CVE-2009-0520) 

  - An input validation vulnerability that leads to a denial     of service attack and could possibly allow for an attacker     to execute arbitrary code. (CVE-2009-0519) 

  - A vulnerability in the Flash Player settings manager that     could contribute to a clickjacking attack. (CVE-2009-0014) 

  - A vulnerability with the mouse pointer display that could     contribute to a clickjacking attack. (CVE-2009-0522)

The remote host is affected by the vulnerability described in GLSA-200903-23 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player:
    The access scope of SystemsetClipboard() allows ActionScript     programs to execute the method without user interaction     (CVE-2008-3873).
    The access scope of FileReference.browse() and     FileReference.download() allows ActionScript programs to execute the     methods without user interaction (CVE-2008-4401).
    The Settings Manager controls can be disguised as normal graphical     elements. This so-called 'clickjacking' vulnerability was disclosed by     Robert Hansen of SecTheory, Jeremiah Grossman of WhiteHat Security,     Eduardo Vela, Matthew Mastracci of DotSpots, and Liu Die Yu of     TopsecTianRongXin (CVE-2008-4503).
    Adan Barth (UC Berkely) and Collin Jackson (Stanford University)     discovered a flaw occurring when interpreting HTTP response headers     (CVE-2008-4818).
    Nathan McFeters and Rob Carter of Ernst and Young's Advanced     Security Center are credited for finding an unspecified vulnerability     facilitating DNS rebinding attacks (CVE-2008-4819).
    When used in a Mozilla browser, Adobe Flash Player does not     properly interpret jar: URLs, according to a report by Gregory     Fleischer of pseudo-flaw.net (CVE-2008-4821).
    Alex 'kuza55' K. reported that Adobe Flash Player does not properly     interpret policy files (CVE-2008-4822).
    The vendor credits Stefano Di Paola of Minded Security for     reporting that an ActionScript attribute is not interpreted properly     (CVE-2008-4823).
    Riley Hassell and Josh Zelonis of iSEC Partners reported multiple     input validation errors (CVE-2008-4824).
    The aforementioned researchers also reported that ActionScript 2     does not verify a member element's size when performing several known     and other unspecified actions, that DefineConstantPool accepts an     untrusted input value for a 'constant count' and that character     elements are not validated when retrieved from a data structure,     possibly resulting in a NULL pointer dereference (CVE-2008-5361,     CVE-2008-5362, CVE-2008-5363).
    The vendor reported an unspecified arbitrary code execution     vulnerability (CVE-2008-5499).
    Liu Die Yu of TopsecTianRongXin reported an unspecified flaw in the     Settings Manager related to 'clickjacking' (CVE-2009-0114).
    The vendor credits Roee Hay from IBM Rational Application Security     for reporting an input validation error when processing SWF files     (CVE-2009-0519).
    Javier Vicente Vallejo reported via the iDefense VCP that Adobe     Flash does not remove object references properly, leading to a freed     memory dereference (CVE-2009-0520).
    Josh Bressers of Red Hat and Tavis Ormandy of the Google Security     Team reported an untrusted search path vulnerability     (CVE-2009-0521).
  Impact :

    A remote attacker could entice a user to open a specially crafted SWF     file, possibly resulting in the execution of arbitrary code with the     privileges of the user or a Denial of Service (crash). Furthermore a     remote attacker could gain access to sensitive information, disclose     memory contents by enticing a user to open a specially crafted PDF file     inside a Flash application, modify the victim's clipboard or render it     temporarily unusable, persuade a user into uploading or downloading     files, bypass security restrictions with the assistance of the user to     gain access to camera and microphone, conduct Cross-Site Scripting and     HTTP Header Splitting attacks, bypass the 'non-root domain policy' of     Flash, and gain escalated privileges.
  Workaround :

    There is no known workaround at this time.

The remote Windows host contains a version of Adobe Flash Player that is earlier than 10.0.22.87 / 9.0.159.0. Such versions are reportedly affected by multiple vulnerabilities : 

  - A buffer overflow issue that could allow an attacker to execute arbitrary code with the privileges of the user running the application. (CVE-2009-0520) 

  - An input validation vulnerability that leads to a denial of service attack and could possibly allow for an attacker to execute arbitrary code. (CVE-2009-0519) 

  - A vulnerability in the Flash Player settings manager that could contribute to a clickjacking attack. (CVE-2009-0014)

  - A vulnerability with the mouse pointer display that could contribute to a clickjacking attack. (CVE-2009-0522) 

The remote host is running a version of Mac OS X 10.5 that is older than version 10.5.7.  Mac OS X 10.5.7 contains security fixes for the following products : 

- Apache
- ATS
- BIND
- CFNetwork
- CoreGraphics
-Cscope
- CUPS
- Disk Images
- enscript
- Flash player
- Help Viewer
- iChat
- Internation Components for Unicode
- IPSec
- Kerberos
- Kernel
- Launch Services
- libxml
- Net-SNMP
- Network Time
- Networking
- OpenSSL
- PHP
- QuickDraw Manager
- ruby
- Safari
- Spotlight
- system_cmds
- telnet
- WebKit
- X11
- Terminal

ID	Name	Product	Family	Published	Updated	Severity
35747	openSUSE 10 Security Update : flash-player (flash-player-6022)	Nessus	SuSE Local Security Checks	2/27/2009	1/14/2021	high
40216	openSUSE Security Update : flash-player (flash-player-560)	Nessus	SuSE Local Security Checks	7/21/2009	1/14/2021	high
41391	SuSE 11 Security Update : flash-player (SAT Patch Number 612)	Nessus	SuSE Local Security Checks	9/24/2009	1/14/2021	high
38743	Mac OS X Multiple Vulnerabilities (Security Update 2009-002)	Nessus	MacOS X Local Security Checks	5/13/2009	7/14/2018	critical
38744	Mac OS X 10.5.x < 10.5.7 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	5/13/2009	7/14/2018	critical
35742	Flash Player 9.0.159.0 / 10.0.22.87 Multiple Vulnerabilities (APSB09-01)	Nessus	Windows	2/26/2009	4/11/2022	high
39962	openSUSE Security Update : flash-player (flash-player-560)	Nessus	SuSE Local Security Checks	7/21/2009	1/14/2021	high
51730	SuSE 10 Security Update : flash-player (ZYPP Patch Number 6020)	Nessus	SuSE Local Security Checks	1/27/2011	1/14/2021	high
35904	GLSA-200903-23 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	3/11/2009	1/6/2021	critical
4937	Flash Player APSB09-01 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2/24/2009	3/6/2019	medium
5023	Mac OS X 10.5 < 10.5.7 Multiple Vulnerabilities	Nessus Network Monitor	Generic	8/18/2004	3/6/2019	critical
800792	Mac OS X 10.5 < 10.5.7 Multiple Vulnerabilities	Log Correlation Engine	Operating System Detection			high

Detections

Analytics

Plugins Search

high

high

high

critical

critical

high

high

high

critical

medium

critical

high