AttackerKBAKB:D4E61CA4-D9F6-4BB7-AA7E-1CFFC6211C56CVE-2011-0611
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.97 High
EPSS
Percentile
99.6%
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a βgroup of included constants,β object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.
Recent assessments:
Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0
References
blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx
bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html
contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html
googlechromereleases.blogspot.com/2011/04/stable-channel-update.html
lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html
secunia.com/advisories/44119
secunia.com/advisories/44141
secunia.com/advisories/44149
secunia.com/blog/210
securityreason.com/securityalert/8204
securityreason.com/securityalert/8292
www.adobe.com/support/security/advisories/apsa11-02.html
www.adobe.com/support/security/bulletins/apsb11-07.html
www.adobe.com/support/security/bulletins/apsb11-08.html
www.exploit-db.com/exploits/17175
www.kb.cert.org/vuls/id/230057
www.redhat.com/support/errata/RHSA-2011-0451.html
www.securityfocus.com/bid/47314
www.securitytracker.com/id?1025324
www.securitytracker.com/id?1025325
www.vupen.com/english/advisories/2011/0922
www.vupen.com/english/advisories/2011/0923
www.vupen.com/english/advisories/2011/0924
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0611
exchange.xforce.ibmcloud.com/vulnerabilities/66681
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14175
Related
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.97 High
EPSS
Percentile
99.6%