PT-2011-5040 · Adobe · Flash Player

Published 2011-12-07 · Updated 2017-09-19 · CVE-2011-4694

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player version 11.1.102.55

Description The issue allows remote attackers to execute arbitrary code via a crafted SWF file. This has been demonstrated by the Intevydis vd adobe fp module in VulnDisco Step Ahead.

Recommendations For Adobe Flash Player version 11.1.102.55, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Related Identifiers

CVE-2011-4694

Affected Products

Flash Player

References · 8

• 🔥 http://partners.immunityinc.com/movies/VulnDisco-Flash0day-v2.mov · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-4694 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14539 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=761223 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4694 · Note
• https://lists.immunityinc.com/pipermail/dailydave/2011-December/000402.html · Note
• http://securitytracker.com/id?1026392 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16096 · Note