Veille CVE
CVE-2011-0609
7.8 Élevée Exploitée activementCatalogue CISA KEV — Adobe Flash Player Unspecified Vulnerability
Ajoutée le 08/06/2022 · Échéance de correction (agences US) : 22/06/2022
Action requise : The impacted product is end-of-life and should be disconnected if still in use.
Description
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.8 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 3.1 | 7.8 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 2.0 | 9.3 Élevée | nvd@nist.gov (NVD) | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Références
- http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html Broken Link
- http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html Mailing ListThird Party Advisory
- http://secunia.com/advisories/43751 Broken Link
- http://secunia.com/advisories/43757 Broken Link
- http://secunia.com/advisories/43772 Broken Link
- http://secunia.com/advisories/43856 Broken Link
- http://securityreason.com/securityalert/8152 Broken Link
- http://www.adobe.com/support/security/advisories/apsa11-01.html Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb11-06.html Not Applicable
- http://www.kb.cert.org/vuls/id/192052 Third Party AdvisoryUS Government Resource
- http://www.redhat.com/support/errata/RHSA-2011-0372.html Broken Link
- http://www.securityfocus.com/bid/46860 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1025210 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1025211 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1025238 Broken LinkThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2011/0655 Broken Link
- http://www.vupen.com/english/advisories/2011/0656 Broken Link
- http://www.vupen.com/english/advisories/2011/0688 Broken Link
- http://www.vupen.com/english/advisories/2011/0732 Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66078 Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14147 Broken Link
- http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html Broken Link
- http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html Mailing ListThird Party Advisory
- http://secunia.com/advisories/43751 Broken Link
- http://secunia.com/advisories/43757 Broken Link
- http://secunia.com/advisories/43772 Broken Link
- http://secunia.com/advisories/43856 Broken Link
- http://securityreason.com/securityalert/8152 Broken Link
- http://www.adobe.com/support/security/advisories/apsa11-01.html Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb11-06.html Not Applicable
- http://www.kb.cert.org/vuls/id/192052 Third Party AdvisoryUS Government Resource
- http://www.redhat.com/support/errata/RHSA-2011-0372.html Broken Link
- http://www.securityfocus.com/bid/46860 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1025210 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1025211 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1025238 Broken LinkThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2011/0655 Broken Link
- http://www.vupen.com/english/advisories/2011/0656 Broken Link
- http://www.vupen.com/english/advisories/2011/0688 Broken Link
- http://www.vupen.com/english/advisories/2011/0732 Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66078 Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14147 Broken Link
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-0609 US Government Resource