Specially crafted Flash files could be exploited to execute arbitrary code. (CVE-2011-0611)

The remote Windows host contains a version of Adobe Acrobat 9.x < 9.4.4 or 10.x < 10.0.3. Such versions are affected by multiple memory corruption vulnerabilities.

A remote attacker could exploit this by tricking a user into viewing a malicious crafted PDF file, resulting in arbitrary code execution.

Note also, CVE-2011-0611 is being exploited in the wild as of April 2011.

The version of HP Systems Insight Manager installed on the remote Windows host is affected by vulnerabilities in the following components :

  - TLS and SSL protocols
  - Apache Tomcat
  - Java
  - Flash Player
  - BlazeDS/GraniteDS
  - Adobe LiveCycle
  - Adobe Flex SDK
  - Systems Insight Manager

ID	名前	製品	ファミリー	公開日	更新日	深刻度
57189	SuSE 10 Security Update : flash-player (ZYPP Patch Number 7477)	Nessus	SuSE Local Security Checks	2011/12/13	2022/3/8	high
53450	Adobe Acrobat 9.x / 10.x Multiple Vulnerabilities (APSB11-08)	Nessus	Windows	2011/4/15	2024/5/31	high
59684	HP Systems Insight Manager < 7.0 Multiple Vulnerabilities	Nessus	Windows	2012/6/15	2022/3/8	critical
53485	SuSE 11.1 Security Update : flash-player (SAT Patch Number 4400)	Nessus	SuSE Local Security Checks	2011/4/19	2022/3/8	high

検出

プラグインの検索

high

high

critical

high