Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable5256.PRM
HistoryDec 09, 2009 - 12:00 a.m.

Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)

2009-12-0900:00:00
Tenable
www.tenable.com
14

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.727

Percentile

98.2%

JSON

The remote Windows host contains a version of Adobe AIR player that is earlier than 1.5.3. Such versions are reportedly affected by multiple vulnerabilities :

  • A vulnerability in the parsing of JPEG data that could potentially lead to code execution. (CVE-2009-3794)

  • A data injection vulnerability that could potentially lead to code execution. (CVE-2009-3796)

  • A memory corruption vulnerability that could potentially lead to code execution. (CVE-2009-3797)

  • A memory corruption vulnerability that could potentially lead to code execution. (CVE-2009-3798)

  • An integer overflow vulnerability that could potentially lead to code execution. (CVE-2009-3799)

  • Multiple crash vulnerabilities that could potentially lead to code execution. (CVE-2009-3800)

  • A Windows-only local file name access vulnerability in the Flash Player ActiveX control that could potentially lead to information disclosure. (CVE-2009-3951)

Binary data 5256.prm
VendorProductVersionCPE
adobeadobe_aircpe:/a:adobe:adobe_air

Related

openvas 16
nessus 13
freebsd 1
suse 1
securityvulns 4
redhat 2
gentoo 1
threatpost 1
cvelist 7
nvd 7
cve 7
seebug 3
prion 7
ubuntucve 6
zdi 2
checkpoint_advisories 2
openvas
openvas
SUSE: Security Advisory for flash-player (SUSE-SA:2009:062)
2009-12-30 00:00:00
Adobe Flash Player/Air Multiple Vulnerabilities (Dec 2009) - Windows
2009-12-17 00:00:00
Adobe Flash Player/Air Multiple Vulnerabilities - dec09 (Windows)
2009-12-17 00:00:00
nessus
nessus
SuSE 11 Security Update : flash-player (SAT Patch Number 1698)
2009-12-22 00:00:00
SuSE 10 Security Update : flash-player (ZYPP Patch Number 6766)
2011-01-27 00:00:00
SuSE 10 Security Update : flash-player (ZYPP Patch Number 6769)
2011-01-27 00:00:00
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2009-07-14 00:00:00
suse
suse
remote code execution in flash-player
2009-12-22 15:16:01
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2009-12-09 00:00:00
ZDI-09-093: Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability
2009-12-09 00:00:00
ZDI-09-093: Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability
2009-12-09 00:00:00
redhat
redhat
(RHSA-2009:1657) Critical: flash-plugin security update
2009-12-09 00:00:00
(RHSA-2009:1658) Critical: flash-plugin security update
2009-12-09 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2010-01-03 00:00:00
threatpost
threatpost
Adobe Zaps Dangerous Flash Player Bugs
2009-12-09 03:23:00
cvelist
cvelist
CVE-2009-3794
2009-12-10 19:00:00
CVE-2009-3797
2009-12-10 19:00:00
CVE-2009-3799
2009-12-10 19:00:00
nvd
nvd
CVE-2009-3794
2009-12-10 19:30:00
CVE-2009-3800
2009-12-10 19:30:00
CVE-2009-3797
2009-12-10 19:30:00
cve
cve
CVE-2009-3794
2009-12-10 19:30:00
CVE-2009-3800
2009-12-10 19:30:00
CVE-2009-3797
2009-12-10 19:30:00
seebug
seebug
Adobe Flash Player JPEG解析堆溢出漏洞
2009-12-12 00:00:00
Adobe Flash Player ActiveX控件信息泄漏漏洞
2009-12-12 00:00:00
Adobe Flash Player ActionScript异常处理器整数溢出漏洞
2009-12-12 00:00:00
prion
prion
Heap overflow
2009-12-10 19:30:00
Memory corruption
2009-12-10 19:30:00
Code injection
2009-12-10 19:30:00
ubuntucve
ubuntucve
CVE-2009-3798
2009-12-10 00:00:00
CVE-2009-3797
2009-12-10 00:00:00
CVE-2009-3799
2009-12-10 00:00:00
zdi
zdi
Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability
2009-12-09 00:00:00
Adobe Flash Player JPEG Parsing Heap Overflow Vulnerability
2009-12-09 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player JPEG Dimensions Data Parsing Heap Overflow (APSB09-19; CVE-2009-3794)
2009-12-09 00:00:00
Adobe Flash PlugIn File Existence Data Disclosure (APSB09-19; CVE-2009-3951)
2009-12-09 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.727

Percentile

98.2%

JSON
Related for 5256.PRM
openvas16nessus13freebsd1suse1securityvulns4redhat2gentoo1threatpost1cvelist7nvd7cve7seebug3prion7ubuntucve6zdi2checkpoint_advisories2