Oval Definition:oval:org.mitre.oval:def:6926
Revision Date:2015-08-03Version:50
Title:Untrusted search path vulnerability in Adobe Flash Player version less than 9.0.289.0 and 10.x before 10.1.102.64
Description:Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-3976
Platform(s):Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Adobe Flash Player
Definition Synopsis
  • Check if Adobe Flash Player version is less than 9.0.289.0
  • Adobe Flash Player is installed
  • AND Check if Adobe Flash Player version less than 9.0.289.0
  • OR Check if Adobe Flash Player version is 10.x before 10.1.102.64
  • Adobe Flash Player 10 is installed
  • AND Check if Adobe Flash Player version less than 10.1.102.64
  • OR Flash.ocx section
  • ActiveX Control is installed
  • AND Flash.ocx versions section
  • Flash.ocx 10 section
  • Determine if the version of Flash.ocx is less than 10.1.102.64
  • AND Determine if the version of Flash.ocx is greater than or equal 10.0
  • OR Flash.ocx 9 section
  • Determine if the version of Flash.ocx is less than 9.0.289.0
  • AND Determine if the version of Flash.ocx is greater than or equal 9.0
    • BACK