This host is installed with Adobe Flex SDK and is prone to Cross-Site Scripting vulnerability.

Successful exploitation could allow remote attackers to cause XSS attacks by injecting arbitrary web script or HTML via the query string on the affected application. Impact Level: Application

Upgrade to Flex SDK version 3.4 http://opensource.adobe.com/wiki/display/flexsdk/Download+Flex+3 **************************************************************** Note: This script detects Adobe Flex SDK installed as part of Adobe Flex Builder only. If SDK is installed seperately, manual verification is required. ****************************************************************

The flaw is due to error in 'index.template.html' in the express-install templates and it occurs when the installed Flash version is older than a specified 'requiredMajorVersion' value.

Adobe Flex SDK version prior to 3.4 on Windows

• http://secunia.com/advisories/36374
• http://www.adobe.com/support/security/bulletins/apsb09-13.html
• http://www.securityfocus.com/archive/1/archive/1/505948/100/0/threaded
• http://xforce.iss.net/xforce/xfdb/52608

---

Updated on 2015-03-25