PT-2011-3844 · Adobe+1 · Flash+5

Publicado 2011-08-10 · Atualizado 2018-10-30 · CVE-2011-2417

NVD

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-2417

RHSA-2011:1144

RHSA-2011:1434

RHSA-2011_1144

RHSA-2011_1434

Produtos afetados

Flash

Acroread

Acroread-Plugin

Air

Myflash Plugin

Flash Player

Referências · 58

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_sps.rb · Exploit
• https://access.redhat.com/security/cve/CVE-2011-2135 · Nota
• https://access.redhat.com/security/cve/CVE-2011-2415 · Nota
• https://access.redhat.com/security/cve/CVE-2011-2096 · Nota
• https://access.redhat.com/security/cve/CVE-2011-2140 · Nota
• https://access.redhat.com/security/cve/CVE-2011-2427 · Nota
• https://access.redhat.com/security/cve/CVE-2011-2107 · Nota
• https://access.redhat.com/security/cve/CVE-2011-2430 · Nota
• https://access.redhat.com/security/cve/CVE-2011-2417 · Nota
• https://access.redhat.com/security/cve/CVE-2011-2137 · Nota
• https://access.redhat.com/security/cve/CVE-2011-2139 · Nota
• https://access.redhat.com/errata/RHSA-2011:1144 · Nota
• http://redhat.com/support/errata/RHSA-2011-1144.html · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2011-2438 · Nota
• http://us-cert.gov/cas/techalerts/TA11-222A.html · Nota