IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
8.8Hoch KEV

CVE-2011-0611Adobe Flash Player Remote Code Execution Vulnerability

adobe flash_player; adobe air; adobe reader; adobe acrobat Veröffentlicht: (vor 15 Jahren)

Bekannt ausgenutzt — Adobe Flash Player Remote Code Execution Vulnerability

CISA hat am 03.03.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 24.03.2022.

Erforderliche Maßnahme: The impacted product is end-of-life and should be disconnected if still in use. https://nvd.nist.gov/vuln/detail/CVE-2011-0611

Beschreibung

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

Schwachstellentyp (CWE): CWE-843

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
adobe acrobat 10.0 – < 10.0.3
adobe acrobat reader 9.0 – < 9.4.4
adobe adobe air < 2.6.19140
adobe air < 2.6.19140
adobe flash_player < 10.2.154.27
adobe reader 9.0 – < 9.4.4
google chrome < 10.0.648.205
opensuse opensuse 11.2
suse linux enterprise desktop 10

Referenzen und Patches

CPE-Treffer (NVD) (15)
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* < 10.2.154.27
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* ≤ 10.2.156.12
  • cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* ≥ 9.0 < 9.4.4
  • cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* ≥ 10.0 ≤ 10.0.1
  • cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:* < 2.6.19140
  • cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* ≥ 9.0 < 9.4.4
  • cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* ≥ 10.0 < 10.0.3
  • cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* ≥ 9.0 < 9.4
  • cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* ≥ 10.0 < 10.0.3
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* < 10.0.648.205
  • cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_desktop:10:sp4:*:*:-:*:*:*
  • cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*

Neue CVEs im selben Produkt — Adobe Acrobat / Reader

8.8Hoch
CVE-2026-100134

Acrobat for Edge | Out-of-bounds Write (CWE-787)

Adobe Acrobat for Edge

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

4.3Mittel
CVE-2026-100132

Acrobat for Edge | Out-of-bounds Read (CWE-125)

Adobe Acrobat for Edge

Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in tha…

5.5Mittel
CVE-2026-81984

Acrobat Reader | Use After Free (CWE-416)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a vic…

7.8Hoch
CVE-2026-81989

Acrobat Reader | Use After Free (CWE-416)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

5.5Mittel
CVE-2026-81991

Acrobat Reader | Out-of-bounds Read (CWE-125)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that …

7.8Hoch
CVE-2026-81980

Acrobat Reader | Out-of-bounds Write (CWE-787)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.