リモートのWindowsホストにKB3087040がありません。したがって、以下の複数の脆弱性による影響を受けます。

  - 詳細不明なスタック破損の問題が存在しており、リモートの攻撃者は任意のコードを実行できます。
    (CVE-2015-5567, CVE-2015-5579)

  - ベクトルの長さ破損の問題が存在し、リモートの攻撃者が詳細不明な影響を与える可能性があります。
    (CVE-2015-5568)

  - 不適切にサニタイズされたユーザー指定の入力により、 use-after-free エラーが詳細不明なコンポーネントに存在しています。A remote attacker can exploit this, via a specially crafted file, to deference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682)

  - 脆弱な JSONP コールバック API からのコンテンツ拒否エラーによる、詳細不明な欠陥が存在します。リモートの攻撃者はこれを悪用して詳細不明な影響を与える可能性があります。
    (CVE-2015-5571)

  - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572)

  - 詳細不明な型の取り違え（type confusion）の欠陥が存在しており、リモートの攻撃者は任意のコードを実行できます。
    (CVE-2015-5573)

  - 特別に細工されたファイルを処理する際の、ユーザー指定の入力の不適切な検証による、詳細不明なコンポーネントに欠陥が存在しています。A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)

  - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576)

  - ユーザー指定入力の不適当な検証により、スタックバッファオーバーフローが存在します。リモート攻撃者がこれを悪用し、任意のコードを実行する可能性があります。（CVE-2015-5587）

  - ユーザー指定入力の不適当な検証により、詳細不明なオーバーフロー状態が存在します。A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678)

  - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

リモートの Redhat Enterprise Linux 6 ホストには、RHSA-2015:1814 アドバイザリに記載された複数の脆弱性の影響を受けるパッケージがインストールされています。

    flash-plugin パッケージには、Mozilla Firefox と互換性のある Adobe Flash Player ウェブブラウザプラグインが含まれています。

    この更新では、Adobe Flash Player の複数の脆弱性を修正します。これらの脆弱性は、「参照」セクションに記載されている Adobe Security Bulletin APSB15-23 で詳細に説明されています。これらの脆弱性により、攻撃者が特別に細工された SWF ファイルを作成し、被害者がその悪質な SWF コンテンツを含むページを読み込むと、flash-plugin のクラッシュ、任意のコードの実行、または秘密情報の漏洩を引き起こす可能性があります。(CVE-2015-5567, CVE-2015-5568、CVE-2015-5570、CVE-2015-5571、CVE-2015-5572、CVE-2015-5573、CVE-2015-5574、CVE-2015-5575、CVE-2015-5576、CVE-2015-5577、CVE-2015-5578、CVE-2015-5579、CVE-2015-5580、CVE-2015-5581、CVE-2015-5582、CVE-2015-5584、CVE-2015-5587、CVE-2015-5588、CVE-2015-6676、CVE-2015-6677、CVE-2015-6678、CVE-2015-6679、CVE-2015-6682)

    Adobe Flash Player のすべてのユーザーは、この更新済みのパッケージをインストールして、バージョンを 11.2.202.521 にアップグレードしてください。

Tenable は、前述の記述ブロックを Red Hat Enterprise Linux セキュリティアドバイザリから直接抽出しています。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションが自己報告するバージョン番号にのみ依存していることに注意してください。

The version of Google Chrome OS on the remote mobile host is prior to 45.0.2454.98 and thus unpatched for the following vulnerabilities :

 - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579) 
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568) 
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to deference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682) 
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571) 
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572) 
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573) 
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677) 
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576) 
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587) 
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678) 
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

Versions of Adobe AIR prior to 19.0.0.190 are outdated and thus unpatched for the following vulnerabilities :

  - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579)
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568)
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to dereference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682)
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571)
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572)
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573)
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576)
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587)
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678)
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

Versions of Adobe Flash Player prior to 19.0.0.185 are outdated and thus unpatched for the following vulnerabilities :

  - An unspecified stack corruption issue exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5567, CVE-2015-5579)
 - A vector length corruption issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5568)
 - A use-after-free error exists in an unspecified component due to improperly sanitized user-supplied input. A remote attacker can exploit this, via a specially crafted file, to dereference already freed memory and execute arbitrary code. (CVE-2015-5570, CVE-2015-5574, CVE-2015-5581, CVE-2015-5584, CVE-2015-6682)
 - An unspecified flaw exists due to a failure to reject content from vulnerable JSONP callback APIs. A remote attacker can exploit this to have an unspecified impact. (CVE-2015-5571)
 - An unspecified flaw exists that allows a remote attacker to bypass security restrictions and gain access to sensitive information. (CVE-2015-5572)
 - An unspecified type confusion flaw exists that allows a remote attacker to execute arbitrary code. (CVE-2015-5573)
 - A flaw exists in an unspecified component due to improper validation of user-supplied input when handling a specially crafted file. A remote attacker can exploit this to corrupt memory, resulting in a denial of service or the execution of arbitrary code. (CVE-2015-5575, CVE-2015-5577, CVE-2015-5578, CVE-2015-5580, CVE-2015-5582, CVE-2015-5588, CVE-2015-6677)
 - A memory leak issue exists that allows a remote attacker to have an unspecified impact. (CVE-2015-5576)
 - A stack buffer overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-5587)
 - An unspecified overflow condition exists due to improper validation of user-supplied input. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-6676, CVE-2015-6678)
 - An unspecified flaw exists that allows a remote attacker to bypass same-origin policy restrictions and gain access to sensitive information. (CVE-2015-6679)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
86065	MS KB3087040：Internet Explorer および Microsoft Edge における Adobe Flash Player での脆弱性に対する更新	Nessus	Windows	2015/9/22	2019/11/22	critical
86097	RHEL 6：flash-plugin（RHSA-2015:1814）	Nessus	Red Hat Local Security Checks	2015/9/23	2025/4/15	high
8888	Google Chrome OS < 45.0.2454.98 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	2015/10/2	2019/3/6	high
9003	Adobe AIR < 19.0.0.190 Multiple Vulnerabilities (APSB15-23)	Nessus Network Monitor	Web Clients	2015/10/21	2019/3/6	critical
9004	Flash Player < 19.0.0.185 Multiple Vulnerabilities (APSB15-23)	Nessus Network Monitor	Web Clients	2015/10/21	2019/3/6	critical

検出

プラグインの検索

critical

high

high

critical

critical