リモートのWindowsホストにインストールされているAdobe Flash Playerは、26.0.0.131より前のバージョンです。したがって、以下の複数の脆弱性による影響を受けます。

  - An information disclosure vulnerability exists due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing specially crafted Flash content, to disclose sensitive information. (CVE-2017-3080)

  - A remote code execution vulnerability exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing specially crafted Flash content, to execute arbitrary code. (CVE-2017-3099)

  - An information disclosure vulnerability exists that allows an unauthenticated, remote attacker to corrupt memory and disclose memory addresses. (CVE-2017-3100)

検出

Adobe Flash Player <= 26.0.0.131 Multiple Vulnerabilities (APSB17-21)

critical Nessus プラグイン ID 101362

変更ログが見つかりません