CVE-2011-0611 Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Re...
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.
CISA Known Exploited Vulnerability
- Date added
- 2022-03-03
- Due date (FCEB)
- 2022-03-24
- Ransomware use
- Unknown
Required action
The impacted product is end-of-life and should be disconnected if still in use.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | < 10.2.154.27 | 10.2.154.27 |
| Adobe flash player | <= 10.2.156.12 | No fix listed |
| Adobe Acrobat Reader | >= 9.0, < 9.4.4 | 9.4.4 |
| Adobe Acrobat Reader | >= 10.0, <= 10.0.1 | No fix listed |
| Adobe Acrobat Reader | >= 10.0, < 10.0.3 | 10.0.3 |
| adobe air | < 2.6.19140 | 2.6.19140 |
| Adobe acrobat | >= 9.0, < 9.4 | 9.4 |
| Adobe acrobat | >= 10.0, < 10.0.3 | 10.0.3 |
| Google Chrome | < 10.0.648.205 | 10.0.648.205 |
| opensuse | = 11.2 | No fix listed |
| opensuse | = 11.3 | No fix listed |
| opensuse | = 11.4 | No fix listed |
| SUSE linux enterprise desktop | = 10-sp4 | No fix listed |
| SUSE linux enterprise desktop | = 11-sp1 | No fix listed |
| Adobe air | < 2.6.19140 | 2.6.19140 |
| Adobe reader | >= 9.0, < 9.4.4 | 9.4.4 |
| Adobe reader | >= 10.0, < 10.0.3 | 10.0.3 |
| Adobe acrobat | >= 9.0, < 9.4.4 | 9.4.4 |
References
- blogs.technet.com not-applicable
- bugix-security.blogspot.com exploit
- contagiodump.blogspot.com exploit issue-tracking
- googlechromereleases.blogspot.com release-notes
- SUSE-SA:2011:018 mailing-list patch vendor-advisory
- 44119 broken-link third-party-advisory vendor-advisory
- 44141 broken-link third-party-advisory vendor-advisory
- 44149 broken-link third-party-advisory vendor-advisory
- secunia.com broken-link vendor-advisory
- 8204 third-party-advisory
- 8292 third-party-advisory
- www.adobe.com broken-link vendor-advisory
- www.adobe.com broken-link vendor-advisory
- www.adobe.com broken-link vendor-advisory
- 17175 exploit third-party-advisory vdb-entry
- VU#230057 broken-link third-party-advisory us-government-resource
- RHSA-2011:0451 broken-link vendor-advisory
- 47314 broken-link third-party-advisory vdb-entry
- 1025324 broken-link third-party-advisory vdb-entry
- 1025325 broken-link third-party-advisory vdb-entry
- ADV-2011-0922 broken-link vdb-entry vendor-advisory
- ADV-2011-0923 broken-link vdb-entry vendor-advisory
- ADV-2011-0924 broken-link vdb-entry vendor-advisory
- adobe-flash-swf-doc-ce(66681) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:14175 broken-link signature vdb-entry
- www.cisa.gov government-resource us-government-resource