PT-2011-2509 · Adobe+1 · Flash Player+1

Publicado 2011-05-13 · Atualizado 2018-10-30 · CVE-2011-0628

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris Adobe Flash Player versions prior to 10.3.185.21 on Android

Description The issue is related to an integer overflow in Adobe Flash Player, allowing remote attackers to execute arbitrary code via ActionScript that improperly handles a long array object.

Recommendations For Adobe Flash Player versions prior to 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris, update to version 10.3.181.14 or later. For Adobe Flash Player versions prior to 10.3.185.21 on Android, update to version 10.3.185.21 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2011-0628

RHSA-2011:0511

RHSA-2011_0511

Produtos afetados

Flash Player

Red Hat

Referências · 22

• https://access.redhat.com/security/cve/CVE-2011-0628 · Nota
• https://access.redhat.com/security/cve/CVE-2011-0623 · Nota
• https://access.redhat.com/security/cve/CVE-2011-0625 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15639 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=908 · Nota
• https://access.redhat.com/security/cve/CVE-2011-0619 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0628 · Nota
• https://access.redhat.com/security/cve/CVE-2011-0618 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0627 · Nota de Segurança
• http://securityfocus.com/bid/47961 · Nota
• https://access.redhat.com/security/cve/CVE-2011-0627 · Nota
• https://access.redhat.com/errata/RHSA-2011:0511 · Nota
• https://access.redhat.com/security/cve/CVE-2011-0622 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0628 · Nota de Segurança
• http://adobe.com/support/security/bulletins/apsb11-12.html · Aviso do Fabricante