CVE Vulnerabilities

CVE-2011-0609

Published: Mar 15, 2011 | Modified: Dec 20, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
6.8 CRITICAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

Affected Software

Name Vendor Start Version End Version
Flash_player Adobe * 10.2.154.13 (including)
Red Hat Enterprise Linux 6 Supplementary RedHat flash-plugin-0:10.2.153.1-1.el6 *
Supplementary for Red Hat Enterprise Linux 5 RedHat flash-plugin-0:10.2.153.1-1.el5 *
Acroread Ubuntu dapper *
Adobe-flashplugin Ubuntu hardy *
Adobe-flashplugin Ubuntu karmic *
Adobe-flashplugin Ubuntu lucid *
Adobe-flashplugin Ubuntu maverick *
Adobe-flashplugin Ubuntu upstream *
Flashplugin-nonfree Ubuntu dapper *
Flashplugin-nonfree Ubuntu devel *
Flashplugin-nonfree Ubuntu hardy *
Flashplugin-nonfree Ubuntu karmic *
Flashplugin-nonfree Ubuntu lucid *
Flashplugin-nonfree Ubuntu maverick *
Flashplugin-nonfree Ubuntu upstream *

References