FreeBSD Ports: linux-f10-flashplugin

# SPDX-FileCopyrightText: 2012 E-Soft Inc.
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.71281");
  script_tag(name:"cvss_base", value:"10.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_cve_id("CVE-2012-0724", "CVE-2012-0725", "CVE-2012-0772", "CVE-2012-0773");
  script_version("2023-07-26T05:05:09+0000");
  script_tag(name:"last_modification", value:"2023-07-26 05:05:09 +0000 (Wed, 26 Jul 2023)");
  script_tag(name:"creation_date", value:"2012-04-30 07:59:26 -0400 (Mon, 30 Apr 2012)");
  script_name("FreeBSD Ports: linux-f10-flashplugin");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2012 E-Soft Inc.");
  script_family("FreeBSD Local Security Checks");
  script_dependencies("gather-package-list.nasl");
  script_mandatory_keys("ssh/login/freebsd", "ssh/login/freebsdrel");

  script_tag(name:"insight", value:"The following package is affected: linux-f10-flashplugin

CVE-2012-0724
Adobe Flash Player before 11.2.202.229 in Google Chrome before
18.0.1025.151 allow attackers to cause a denial of service (memory
corruption) or possibly have unspecified other impact via unknown
vectors, a different vulnerability than CVE-2012-0725.
CVE-2012-0725
Adobe Flash Player before 11.2.202.229 in Google Chrome before
18.0.1025.151 allow attackers to cause a denial of service (memory
corruption) or possibly have unspecified other impact via unknown
vectors, a different vulnerability than CVE-2012-0724.
CVE-2012-0772
An unspecified ActiveX control in Adobe Flash Player before
10.3.183.18 and 11.x before 11.2.202.228, and AIR before 3.2.0.2070,
on Windows does not properly perform URL security domain checking,
which allow attackers to execute arbitrary code or cause a denial of
service (memory corruption) via unknown vectors.
CVE-2012-0773
The NetStream class in Adobe Flash Player before 10.3.183.18 and 11.x
before 11.2.202.228 on Windows, Mac OS X, and Linux, Flash Player
before 10.3.183.18 and 11.x before 11.2.202.223 on Solaris, Flash
Player before 11.1.111.8 on Android 2.x and 3.x, and AIR before
3.2.0.2070 allows attackers to execute arbitrary code or cause a
denial of service (memory corruption) via unspecified vectors.");

  script_tag(name:"solution", value:"Update your system with the appropriate patches or
  software upgrades.");

  script_xref(name:"URL", value:"https://www.adobe.com/support/security/bulletins/apsb12-07.html");
  script_xref(name:"URL", value:"http://www.vuxml.org/freebsd/20923a0d-82ba-11e1-8d7b-003067b2972c.html");

  script_tag(name:"summary", value:"The remote host is missing an update to the system
  as announced in the referenced advisory.");

  script_tag(name:"qod_type", value:"package");
  script_tag(name:"solution_type", value:"VendorFix");

  exit(0);
}

include("revisions-lib.inc");
include("pkg-lib-bsd.inc");

vuln = FALSE;
txt = "";

bver = portver(pkg:"linux-f10-flashplugin");
if(!isnull(bver) && revcomp(a:bver, b:"11.2r202.228")<0) {
  txt += "Package linux-f10-flashplugin version " + bver + " is installed which is known to be vulnerable.\n";
  vuln = TRUE;
}

if(vuln) {
  security_message(data:txt);
} else if (__pkg_match) {
  exit(99);
}