CVE-2011-4693

2011-12-0720:55:00

mitre

web.nvd.nist.gov

adobe flash player

vulnerability

remote execution

swf

cve-2011-4693

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.038

Percentile

92.0%

JSON

Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the first of two vulnerabilities exploited by the Intevydis vd_adobe_fp module in VulnDisco Step Ahead (SA). NOTE: as of 20111207, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

Affected configurations

Nvd

Node

adobeflash_playerMatch11.1.102.55

AND

applemac_os_x

microsoftwindows

VendorProductVersionCPE
adobeflash_player11.1.102.55cpe:2.3:a:adobe:flash_player:11.1.102.55:*:*:*:*:*:*:*
applemac_os_x*cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
adobe	flash_player	11.1.102.55	cpe:2.3:a:adobe:flash_player:11.1.102.55:::::::*
apple	mac_os_x	*	cpe:2.3:o:apple:mac_os_x::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::