PT-2011-2509 · Adobe+1 · Flash Player+1

Published 2011-05-13 · Updated 2018-10-30 · CVE-2011-0628

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris Adobe Flash Player versions prior to 10.3.185.21 on Android

Description The issue is related to an integer overflow in Adobe Flash Player, allowing remote attackers to execute arbitrary code via ActionScript that improperly handles a long array object.

Recommendations For Adobe Flash Player versions prior to 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris, update to version 10.3.181.14 or later. For Adobe Flash Player versions prior to 10.3.185.21 on Android, update to version 10.3.185.21 or later.

Fix

RCE

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2011-0628

RHSA-2011:0511

RHSA-2011_0511

Affected Products

Flash Player

Red Hat

References · 22

• https://nvd.nist.gov/vuln/detail/CVE-2011-0627 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2011-0628 · Security Note
• http://adobe.com/support/security/bulletins/apsb11-12.html · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2011-0628 · Note
• https://access.redhat.com/security/cve/CVE-2011-0623 · Note
• https://access.redhat.com/security/cve/CVE-2011-0625 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15639 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=908 · Note
• https://access.redhat.com/security/cve/CVE-2011-0619 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0628 · Note
• https://access.redhat.com/security/cve/CVE-2011-0618 · Note
• http://securityfocus.com/bid/47961 · Note
• https://access.redhat.com/security/cve/CVE-2011-0627 · Note
• https://access.redhat.com/errata/RHSA-2011:0511 · Note
• https://access.redhat.com/security/cve/CVE-2011-0622 · Note