PT-2011-2446 · Adobe+1 · Flash Player+1

Publicado 2011-02-09 · Atualizado 2018-10-30 · CVE-2011-0558

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.2.152.26

Description The issue is related to an integer overflow in Adobe Flash Player, which allows attackers to execute arbitrary code. This is achieved by providing a large array length value in the ActionScript method of the Function class.

Recommendations For versions prior to 10.2.152.26, update to version 10.2.152.26 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2011-0558

RHSA-2011:0206

RHSA-2011:0368

RHSA-2011_0206

Produtos afetados

Flash Player

Red Hat

Referências · 37

• http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2 · Nota
• http://secunia.com/advisories/43292 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16129 · Nota
• https://access.redhat.com/errata/RHSA-2011:0206 · Nota
• https://access.redhat.com/security/cve/CVE-2011-0573 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0558 · Nota
• http://vupen.com/english/advisories/2011/0646 · Aviso do Fabricante
• http://secunia.com/advisories/43340 · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0402 · Aviso do Fabricante
• http://adobe.com/support/security/bulletins/apsb11-02.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65230 · Nota
• http://securityfocus.com/bid/46194 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=893 · Nota
• https://access.redhat.com/security/cve/CVE-2011-0577 · Nota