Summary
The remote host is missing an update to the system as announced in the referenced advisory.
Solution
Update your system with the appropriate patches or software upgrades.
http://www.adobe.com/support/security/bulletins/apsb10-06.html http://www.vuxml.org/freebsd/ff6519ad-18e5-11df-9bdd-001b2134ef46.html
Insight
The following packages are affected:
linux-flashplugin
linux-f8-flashplugin
linux-f10-flashplugin
CVE-2010-0186
Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.
CVE-2010-0187
Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.
Severity
Classification
-
CVE CVE-2010-0186, CVE-2010-0187 -
CVSS Base Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities