IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
7.8Yüksek KEV

CVE-2011-0609Adobe Flash Player Unspecified Vulnerability

adobe flash player; adobe acrobat; adobe acrobat reader; adobe air Yayım: (15 yıl önce)

Aktif olarak istismar ediliyor — Adobe Flash Player Unspecified Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 08.06.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 22.06.2022.

Gerekli işlem: The impacted product is end-of-life and should be disconnected if still in use. https://nvd.nist.gov/vuln/detail/CVE-2011-0609

Açıklama

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
adobe acrobat 9.0 – ≤ 9.4.2
adobe acrobat reader 9.0 – ≤ 9.4.2
adobe air ≤ 2.5.1
adobe flash player ≤ 10.2.154.13
google chrome < 10.0.648.134
opensuse opensuse 11.2
suse linux enterprise 10.0

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (15)
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* ≤ 10.2.154.13
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* ≤ 10.1.106.16
  • cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:* ≥ 9.0 ≤ 9.4.2
  • cpe:2.3:a:adobe:acrobat:10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat:10.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:* ≥ 9.0 ≤ 9.4.2
  • cpe:2.3:a:adobe:acrobat_reader:10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:acrobat_reader:10.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:* ≤ 2.5.1
  • cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
  • cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise:10.0:sp3:*:*:*:*:*:*
  • cpe:2.3:o:suse:linux_enterprise:11.0:sp1:*:*:*:*:*:*
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* < 10.0.648.134

Aynı üründe son açıklar — Adobe Acrobat / Reader

8.8Yüksek
CVE-2026-100134

Acrobat for Edge | Out-of-bounds Write (CWE-787)

Adobe Acrobat for Edge

Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

4.3Orta
CVE-2026-100132

Acrobat for Edge | Out-of-bounds Read (CWE-125)

Adobe Acrobat for Edge

Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in tha…

5.5Orta
CVE-2026-81984

Acrobat Reader | Use After Free (CWE-416)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a vic…

7.8Yüksek
CVE-2026-81989

Acrobat Reader | Use After Free (CWE-416)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

5.5Orta
CVE-2026-81991

Acrobat Reader | Out-of-bounds Read (CWE-125)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that …

7.8Yüksek
CVE-2026-81980

Acrobat Reader | Out-of-bounds Write (CWE-787)

Adobe Adobe Acrobat; Adobe Acrobat Reader; Adobe Acrobat 2024

Acrobat Reader is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.