Adobe · Flash Player
CVE-2011-0609
Adobe Flash Player Unspecified Vulnerability
概要
Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.
CISA: Adobe Flash Player contains an unspecified vulnerability that allows remote attackers to execute code or cause denial-of-service (DoS).
対処法
The impacted product is end-of-life and should be disconnected if still in use.
米国連邦機関の対応期限：2022年6月22日
- CISAのリストに追加
- 2022年6月8日
- 公開日
- 2011年3月15日
- 深刻度
- 高 7.8 CVSS 3.1
- 今後30日間に攻撃される可能性（EPSS）
- 64% 既知の全脆弱性の上位0.8%
- 詳細
- NVD · CVE.org · CISA
すべての参照（20件）
- http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
- http://www.redhat.com/support/errata/RHSA-2011-0372.html
- http://www.securityfocus.com/bid/46860
- http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html
- http://www.vupen.com/english/advisories/2011/0732
- http://www.adobe.com/support/security/advisories/apsa11-01.html
- http://secunia.com/advisories/43751
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14147
- http://www.vupen.com/english/advisories/2011/0656
- http://www.securitytracker.com/id?1025211
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66078
- http://www.vupen.com/english/advisories/2011/0655
- http://www.securitytracker.com/id?1025210
- http://secunia.com/advisories/43856
- http://www.kb.cert.org/vuls/id/192052
- http://secunia.com/advisories/43772
- http://www.adobe.com/support/security/bulletins/apsb11-06.html
- http://securityreason.com/securityalert/8152
- http://www.securitytracker.com/id?1025238
- http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html
Adobeのその他の悪用された脆弱性
| 追加日 | 脆弱性 | 製品 | 深刻度 | 攻撃の可能性 |
|---|---|---|---|---|
| 2024/09/17 | Incorrect Default Permissions | Flash Player | 高 8.8 | 11% |
| 2024/09/17 | Code Execution | Flash Player | 高 8.8 | 11% |
| 2024/09/17 | Integer Underflow Vulnerablity | Flash Player | 高 8.8 | 99.9% |
| 2024/09/17 | Double Free Vulnerablity | Flash Player | 高 8.8 | 25% |
| 2022/06/08 | Memory Corruption | Flash Player | 高 7.8 | 83% |
| 2022/06/08 | Memory Corruption | Flash Player | 高 7.8 | 91% |
| 2022/06/08 | Cross-Site Scripting (XSS) | Flash Player | 中 6.1 | 6.2% |
| 2022/06/08 | Integer Overflow | Flash Player | 高 8.8 | 21% |
出典：Known Exploited Vulnerabilities（CISA、パブリックドメイン）、CVE records（cve.org）、EPSS（FIRST）。攻撃の可能性は、今後30日以内に誰かがその脆弱性の悪用を試みるというEPSSの推定値です。