リモートのWindowsホストにインストールされているAdobe Flash Playerは、26.0.0.137より前のバージョンです。したがって、以下の複数の脆弱性による影響を受けます。

  - An information disclosure vulnerability exists due to an unspecified flaw. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing specially crafted Flash content, to disclose sensitive information. (CVE-2017-3085)

  - A remote code execution vulnerability exists due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, by convincing a user to visit a website containing specially crafted Flash content, to execute arbitrary code. (CVE-2017-3106)

検出

Adobe Flash Player <= 26.0.0.137 Multiple Vulnerabilities (APSB17-23)

high Nessus プラグイン ID 102262

変更ログが見つかりません