Lucene search

K
nessusTenable6705.PRM
HistoryFeb 27, 2013 - 12:00 a.m.

Flash Player <= 10.3.183.63 / 11.6.602.168 Multiple Vulnerabilities (APSB13-08)

2013-02-2700:00:00
Tenable
www.tenable.com
8

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.057 Low

EPSS

Percentile

93.4%

The remote host has Adobe Flash Player installed.

Versions of Flash Player 11.x equal to or earlier than 11.6.602.168, or 10.x equal to or earlier than 10.3.183.63 are affected by multiple vulnerabilities:

  • A buffer overflow error exists related to the β€˜broker service’. (CVE-2013-0504)

  • A permissions issue exists related to the Firefox sandbox. (CVE-2013-0643)

  • An unspecified error exists related to β€˜ExternalInterface ActionScript’ feature. (CVE-2013-0648)

Binary data 6705.prm
VendorProductVersionCPE
adobeflash_playercpe:/a:adobe:flash_player

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.057 Low

EPSS

Percentile

93.4%