CVE-2011-0611

KEV
Published: Apr 13, 2011 Last Modified: Ott 22, 2025
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,8
Source: [email protected]
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH 9,3
Source: [email protected]
Access Vector: network
Access Complexity: medium
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete

Description

AI Translation Available

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a 'group of included constants,' object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,9370
Percentile
1,0th
Updated

EPSS Score Trend (Last 91 Days)

843

Access of Resource Using Incompatible Type ('Type Confusion')

Incomplete
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Integrity Confidentiality
Potential Impacts:
Read Memory Modify Memory Execute Unauthorized Code Or Commands Dos: Crash, Exit, Or Restart
Applicable Platforms
Languages: C, C++
View CWE Details
Exploit

Adobe Flash Player 10.2.153.1 - SWF Memory Corruption …

Verified Metasploit Framework (MSF)

Adobe Flash Player 10.2.153.1 - SWF Memory Corruption (Metasploit)

Author: Metasploit Published: Status: Verified
View Exploit Code →
Exploit

Adobe Reader X 10.0.0 < 10.0.1 - Atom …

Verified

Adobe Reader X 10.0.0 < 10.0.1 - Atom Type Confusion

Author: Snake Published: Status: Verified
View Exploit Code →
Application

Adobe Air by Adobe

Product Information
Vendor Adobe
Product Adobe Air
Version Range Affected
To 2.6.19140 (exclusive)
cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Chrome by Google

Product Information
Vendor Google
Product Chrome
Version Range Affected
To 10.0.648.205 (exclusive)
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Desktop by Suse

Product Information
Vendor Suse
Product Linux Enterprise Desktop
Version 10
cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Acrobat Reader by Adobe

Product Information
Vendor Adobe
Product Acrobat Reader
Version Range Affected
From 10.0 (inclusive)
To 10.0.1 (inclusive)
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Flash Player by Adobe

Product Information
Vendor Adobe
Product Flash Player
Version Range Affected
To 10.2.156.12 (inclusive)
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Opensuse by Opensuse

Product Information
Vendor Opensuse
Product Opensuse
Version 11.3
cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Acrobat Reader by Adobe

Product Information
Vendor Adobe
Product Acrobat Reader
Version Range Affected
From 10.0 (inclusive)
To 10.0.3 (exclusive)
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Enterprise Desktop by Suse

Product Information
Vendor Suse
Product Linux Enterprise Desktop
Version 11
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Acrobat by Adobe

Product Information
Vendor Adobe
Product Acrobat
Version Range Affected
From 10.0 (inclusive)
To 10.0.3 (exclusive)
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Opensuse by Opensuse

Product Information
Vendor Opensuse
Product Opensuse
Version 11.2
cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Opensuse by Opensuse

Product Information
Vendor Opensuse
Product Opensuse
Version 11.4
cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Acrobat Reader by Adobe

Product Information
Vendor Adobe
Product Acrobat Reader
Version Range Affected
From 9.0 (inclusive)
To 9.4.4 (exclusive)
cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Acrobat by Adobe

Product Information
Vendor Adobe
Product Acrobat
Version Range Affected
From 9.0 (inclusive)
To 9.4 (exclusive)
cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Application

Flash Player by Adobe

Product Information
Vendor Adobe
Product Flash Player
Version Range Affected
To 10.2.154.27 (exclusive)
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://www.cisa.gov/known-exploited-vulnerabilities-catalo…
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011…
http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis…
http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-061…
http://bugix-security.blogspot.com/2011/04/cve-2011-0611-ad…
http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.h…
http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-061…
http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.…
http://googlechromereleases.blogspot.com/2011/04/stable-cha…
http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2011-0…
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html
http://secunia.com/advisories/44119
http://secunia.com/advisories/44119
http://secunia.com/advisories/44141
http://secunia.com/advisories/44141
http://secunia.com/advisories/44149
http://secunia.com/advisories/44149
http://secunia.com/blog/210/
http://secunia.com/blog/210/
http://securityreason.com/securityalert/8204
http://securityreason.com/securityalert/8204
http://securityreason.com/securityalert/8292
http://securityreason.com/securityalert/8292
https://exchange.xforce.ibmcloud.com/vulnerabilities/66681
https://exchange.xforce.ibmcloud.com/vulnerabilities/66681
https://oval.cisecurity.org/repository/search/definition/ov…
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
http://www.adobe.com/support/security/advisories/apsa11-02.…
http://www.adobe.com/support/security/advisories/apsa11-02.html
http://www.adobe.com/support/security/bulletins/apsb11-07.h…
http://www.adobe.com/support/security/bulletins/apsb11-07.html
http://www.adobe.com/support/security/bulletins/apsb11-08.h…
http://www.adobe.com/support/security/bulletins/apsb11-08.html
http://www.exploit-db.com/exploits/17175
http://www.exploit-db.com/exploits/17175
http://www.kb.cert.org/vuls/id/230057
http://www.kb.cert.org/vuls/id/230057
http://www.redhat.com/support/errata/RHSA-2011-0451.html
http://www.redhat.com/support/errata/RHSA-2011-0451.html
http://www.securityfocus.com/bid/47314
http://www.securityfocus.com/bid/47314
http://www.securitytracker.com/id?1025324
http://www.securitytracker.com/id?1025324
http://www.securitytracker.com/id?1025325
http://www.securitytracker.com/id?1025325
http://www.vupen.com/english/advisories/2011/0922
http://www.vupen.com/english/advisories/2011/0922
http://www.vupen.com/english/advisories/2011/0923
http://www.vupen.com/english/advisories/2011/0923
http://www.vupen.com/english/advisories/2011/0924
http://www.vupen.com/english/advisories/2011/0924
http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis…
http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-061…
http://bugix-security.blogspot.com/2011/04/cve-2011-0611-ad…
http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.h…
http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-061…
http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.…
http://googlechromereleases.blogspot.com/2011/04/stable-cha…
http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html
http://lists.opensuse.org/opensuse-security-announce/2011-0…
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html
http://secunia.com/advisories/44119
http://secunia.com/advisories/44119
http://secunia.com/advisories/44141
http://secunia.com/advisories/44141
http://secunia.com/advisories/44149
http://secunia.com/advisories/44149
http://secunia.com/blog/210/
http://secunia.com/blog/210/
http://securityreason.com/securityalert/8204
http://securityreason.com/securityalert/8204
http://securityreason.com/securityalert/8292
http://securityreason.com/securityalert/8292
https://exchange.xforce.ibmcloud.com/vulnerabilities/66681
https://exchange.xforce.ibmcloud.com/vulnerabilities/66681
https://oval.cisecurity.org/repository/search/definition/ov…
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%…
http://www.adobe.com/support/security/advisories/apsa11-02.…
http://www.adobe.com/support/security/advisories/apsa11-02.html
http://www.adobe.com/support/security/bulletins/apsb11-07.h…
http://www.adobe.com/support/security/bulletins/apsb11-07.html
http://www.adobe.com/support/security/bulletins/apsb11-08.h…
http://www.adobe.com/support/security/bulletins/apsb11-08.html
http://www.exploit-db.com/exploits/17175
http://www.exploit-db.com/exploits/17175
http://www.kb.cert.org/vuls/id/230057
http://www.kb.cert.org/vuls/id/230057
http://www.redhat.com/support/errata/RHSA-2011-0451.html
http://www.redhat.com/support/errata/RHSA-2011-0451.html
http://www.securityfocus.com/bid/47314
http://www.securityfocus.com/bid/47314
http://www.securitytracker.com/id?1025324
http://www.securitytracker.com/id?1025324
http://www.securitytracker.com/id?1025325
http://www.securitytracker.com/id?1025325
http://www.vupen.com/english/advisories/2011/0922
http://www.vupen.com/english/advisories/2011/0922
http://www.vupen.com/english/advisories/2011/0923
http://www.vupen.com/english/advisories/2011/0923
http://www.vupen.com/english/advisories/2011/0924
http://www.vupen.com/english/advisories/2011/0924