Back to feed
EUVD-2011-0627 · Published Mar 15, 2011
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.
Technologies
Google AndroidApple MacosGoogle Chrome OsGoogle ChromeAdobe Acrobat ReaderOpensuse OpensuseApple Mac Os XOracle SolarisAdobe AcrobatAdobe AirMicrosoft WindowsSuse Linux EnterpriseAdobe Flash PlayerLinux Linux Kernel
CVSS scores
- v3.17.8
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - v2.09.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html
- http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html
- http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
- http://secunia.com/advisories/43751
- http://secunia.com/advisories/43757
- http://secunia.com/advisories/43772
Potentially impacted assets
See if this affects your attack surface
