Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-0611
HistoryApr 13, 2011 - 2:55 p.m.

CVE-2011-0611

2011-04-1314:55:01
CWE-843
[email protected]
web.nvd.nist.gov
3

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9

Confidence

High

EPSS

0.961

Percentile

99.5%

JSON

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a β€œgroup of included constants,” object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

Affected configurations

Nvd
Node
adobeflash_playerRange<10.2.154.27
AND
applemac_os_xMatch-
OR
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-
OR
oraclesolarisMatch-
Node
adobeflash_playerRange≀10.2.156.12
AND
googleandroidMatch-
Node
adobeacrobat_readerRange9.0–9.4.4
OR
adobeacrobat_readerRange10.0–10.0.1
AND
microsoftwindowsMatch-
Node
adobeadobe_airRange<2.6.19140
Node
adobeacrobat_readerRange9.0–9.4.4
OR
adobeacrobat_readerRange10.0–10.0.3
AND
applemac_os_xMatch-
Node
adobeacrobatRange9.0–9.4
OR
adobeacrobatRange10.0–10.0.3
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
googlechromeRange<10.0.648.205
AND
applemac_os_xMatch-
OR
googlechrome_osMatch-
OR
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-
Node
opensuseopensuseMatch11.2
OR
opensuseopensuseMatch11.3
OR
opensuseopensuseMatch11.4
OR
suselinux_enterprise_desktopMatch10sp4-
OR
suselinux_enterprise_desktopMatch11sp1

References

Related

cert 1
openvas 9
threatpost 5
prion 1
attackerkb 1
cve 1
redhat 1
nessus 15
seebug 3
exploitpack 1
ubuntucve 1
checkpoint_advisories 1
packetstorm 1
saint 4
freebsd 1
suse 1
metasploit 1
thn 1
cvelist 1
vulnrichment 1
cisa_kev 1
exploitdb 2
securelist 1
myhack58 1
gentoo 1
cert
cert
Adobe Flash Player contains unspecified code execution vulnerability
2011-04-12 00:00:00
openvas
openvas
SUSE: Security Advisory for flash-player (SUSE-SA:2011:018)
2011-04-22 00:00:00
FreeBSD Ports: linux-flashplugin
2011-05-12 00:00:00
SuSE Update for flash-player SUSE-SA:2011:018
2011-04-22 00:00:00
threatpost
threatpost
Analysis of the New Adobe Flash Attacks
2011-04-13 16:13:42
Adobe Releases Patch for Flash Zero Day Hole in Reader, Acrobat
2011-04-21 20:11:41
Adobe Flash Bug Being Used in Attacks Via Word Documents
2011-04-12 11:51:03
prion
prion
Type confusion
2011-04-13 14:55:00
attackerkb
attackerkb
CVE-2011-0611
2011-04-13 00:00:00
cve
cve
CVE-2011-0611
2011-04-13 14:55:01
redhat
redhat
(RHSA-2011:0451) Critical: flash-plugin security update
2011-04-18 00:00:00
nessus
nessus
RHEL 5 / 6 : flash-plugin (RHSA-2011:0451)
2011-04-19 00:00:00
Flash Player < 10.2.159.1 ActionScript Predefined Class Prototype Addition Remote Code Execution (APSB11-07)
2011-04-18 00:00:00
Google Chrome < 10.0.648.205 Multiple Vulnerabilities
2011-04-14 00:00:00
seebug
seebug
Adobe Reader X Atom Type Confusion Vulnerability Exploit
2014-07-01 00:00:00
Adobe Flash Player 10.2.153.1 SWF Memory Corruption Vulnerability
2011-04-24 00:00:00
Adobe Flash Player 'SWF'ζ–‡δ»ΆθΏœη¨‹ε†…ε­˜η ΄εζΌζ΄ž
2011-04-13 00:00:00
exploitpack
exploitpack
Adobe Reader X 10.0.0 10.0.1 - Atom Type Confusion
2011-07-03 00:00:00
ubuntucve
ubuntucve
CVE-2011-0611
2011-04-13 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player ActionScript callMethod Code Execution (APSA11-02; CVE-2011-0611)
2011-04-21 00:00:00
packetstorm
packetstorm
Adobe Flash Player 10.2.153.1 SWF Memory Corruption Vulnerability
2011-04-17 00:00:00
saint
saint
Adobe Flash Player callMethod Bytecode Memory Corruption
2011-04-21 00:00:00
Adobe Flash Player callMethod Bytecode Memory Corruption
2011-04-21 00:00:00
Adobe Flash Player callMethod Bytecode Memory Corruption
2011-04-21 00:00:00
freebsd
freebsd
linux-flashplugin -- remote code execution vulnerability
2011-01-20 00:00:00
suse
suse
remote code execution in flash-player
2011-04-18 16:33:38
metasploit
metasploit
Adobe Flash Player 10.2.153.1 SWF Memory Corruption Vulnerability
2011-04-16 02:09:33
thn
thn
Emergency Adobe Flash Player patch coming today !
2011-04-16 07:59:00
cvelist
cvelist
CVE-2011-0611
2011-04-13 14:00:00
vulnrichment
vulnrichment
CVE-2011-0611
2011-04-13 14:00:00
cisa_kev
cisa_kev
Adobe Flash Player Remote Code Execution Vulnerability
2022-03-03 00:00:00
exploitdb
exploitdb
Adobe Reader X 10.0.0 &lt; 10.0.1 - Atom Type Confusion
2011-07-03 00:00:00
Adobe Flash Player 10.2.153.1 - SWF Memory Corruption (Metasploit)
2011-04-16 00:00:00
securelist
securelist
Investigation Report for the September 2014 Equation malware detection incident in the US
2017-11-16 10:00:34
myhack58
myhack58
The macro perspective of the office vulnerability, 2010-2018-a vulnerability warning-the black bar safety net
2019-06-13 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2011-10-13 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9

Confidence

High

EPSS

0.961

Percentile

99.5%

JSON
Related for NVD:CVE-2011-0611
cert1openvas9threatpost5prion1attackerkb1cve1redhat1nessus15seebug3exploitpack1ubuntucve1checkpoint_advisories1packetstorm1saint4freebsd1suse1metasploit1thn1cvelist1vulnrichment1cisa_kev1exploitdb2securelist1myhack581gentoo1