CVE-2011-0609
HIGH
7,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH
9,3
Source: [email protected]
Access Vector: network
Access Complexity: medium
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete
Description
AI Translation Available
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,9219
Percentile
1,0th
Updated
EPSS Score Trend (Last 91 Days)
Exploit
Adobe Flash Player - AVM Bytecode Verification (Metasploit)
Verified Metasploit Framework (MSF)Adobe Flash Player - AVM Bytecode Verification (Metasploit)
View Exploit Code →
Operating System
Linux Enterprise by Suse
CPE Identifier
View Detailed Analysis
cpe:2.3:o:suse:linux_enterprise:10.0:sp3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Air by Adobe
Version Range Affected
To
2.5.1
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Chrome by Google
Version Range Affected
To
10.0.648.134
(exclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Linux Enterprise by Suse
CPE Identifier
View Detailed Analysis
cpe:2.3:o:suse:linux_enterprise:11.0:sp1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Opensuse by Opensuse
CPE Identifier
View Detailed Analysis
cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Acrobat Reader by Adobe
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Flash Player by Adobe
Version Range Affected
To
10.2.154.13
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Opensuse by Opensuse
CPE Identifier
View Detailed Analysis
cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Acrobat by Adobe
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Acrobat Reader by Adobe
Version Range Affected
From
9.0
(inclusive)
To
9.4.2
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Acrobat by Adobe
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System
Opensuse by Opensuse
CPE Identifier
View Detailed Analysis
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Flash Player by Adobe
Version Range Affected
To
10.1.106.16
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Acrobat by Adobe
Version Range Affected
From
9.0
(inclusive)
To
9.4.2
(inclusive)
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application
Acrobat Reader by Adobe
CPE Identifier
View Detailed Analysis
cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011…
http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html
http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-update…
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
http://secunia.com/advisories/43751
http://secunia.com/advisories/43757
http://secunia.com/advisories/43772
http://secunia.com/advisories/43856
http://securityreason.com/securityalert/8152
https://exchange.xforce.ibmcloud.com/vulnerabilities/66078
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
http://www.adobe.com/support/security/advisories/apsa11-01.html
http://www.adobe.com/support/security/bulletins/apsb11-06.html
http://www.kb.cert.org/vuls/id/192052
http://www.redhat.com/support/errata/RHSA-2011-0372.html
http://www.securityfocus.com/bid/46860
http://www.securitytracker.com/id?1025210
http://www.securitytracker.com/id?1025211
http://www.securitytracker.com/id?1025238
http://www.vupen.com/english/advisories/2011/0655
http://www.vupen.com/english/advisories/2011/0656
http://www.vupen.com/english/advisories/2011/0688
http://www.vupen.com/english/advisories/2011/0732
http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html
http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-update…
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
http://secunia.com/advisories/43751
http://secunia.com/advisories/43757
http://secunia.com/advisories/43772
http://secunia.com/advisories/43856
http://securityreason.com/securityalert/8152
https://exchange.xforce.ibmcloud.com/vulnerabilities/66078
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
http://www.adobe.com/support/security/advisories/apsa11-01.html
http://www.adobe.com/support/security/bulletins/apsb11-06.html
http://www.kb.cert.org/vuls/id/192052
http://www.redhat.com/support/errata/RHSA-2011-0372.html
http://www.securityfocus.com/bid/46860
http://www.securitytracker.com/id?1025210
http://www.securitytracker.com/id?1025211
http://www.securitytracker.com/id?1025238
http://www.vupen.com/english/advisories/2011/0655
http://www.vupen.com/english/advisories/2011/0656
http://www.vupen.com/english/advisories/2011/0688
http://www.vupen.com/english/advisories/2011/0732