جزئیات آسیب‌پذیری

خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-0611 government-resource
• http://bugix-security.blogspot.com/2011/04/cve-2011-0611-adobe-flash-zero-day.html x_refsource_MISC
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14175 vdb-entrysignaturex_refsource_OVAL
• http://www.securityfocus.com/bid/47314 vdb-entryx_refsource_BID
• http://secunia.com/blog/210/ x_refsource_MISC
• http://securityreason.com/securityalert/8204 third-party-advisoryx_refsource_SREASON
• http://www.vupen.com/english/advisories/2011/0922 vdb-entryx_refsource_VUPEN
• http://www.redhat.com/support/errata/RHSA-2011-0451.html vendor-advisoryx_refsource_REDHAT
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html vendor-advisoryx_refsource_SUSE
• http://www.adobe.com/support/security/bulletins/apsb11-07.html x_refsource_CONFIRM
• http://securityreason.com/securityalert/8292 third-party-advisoryx_refsource_SREASON
• http://secunia.com/advisories/44149 third-party-advisoryx_refsource_SECUNIA
• http://secunia.com/advisories/44141 third-party-advisoryx_refsource_SECUNIA
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66681 vdb-entryx_refsource_XF
• http://www.vupen.com/english/advisories/2011/0924 vdb-entryx_refsource_VUPEN
• http://www.securitytracker.com/id?1025325 vdb-entryx_refsource_SECTRACK
• http://www.exploit-db.com/exploits/17175 exploitx_refsource_EXPLOIT-DB
• http://blogs.technet.com/b/mmpc/archive/2011/04/12/analysis-of-the-cve-2011-0611-adobe-flash-player-vulnerability-exploitation.aspx x_refsource_MISC
• http://secunia.com/advisories/44119 third-party-advisoryx_refsource_SECUNIA
• http://www.kb.cert.org/vuls/id/230057 third-party-advisoryx_refsource_CERT-VN
• http://contagiodump.blogspot.com/2011/04/apr-8-cve-2011-0611-flash-player-zero.html x_refsource_MISC
• http://www.vupen.com/english/advisories/2011/0923 vdb-entryx_refsource_VUPEN
• http://www.adobe.com/support/security/advisories/apsa11-02.html x_refsource_CONFIRM
• http://googlechromereleases.blogspot.com/2011/04/stable-channel-update.html x_refsource_CONFIRM
• http://www.adobe.com/support/security/bulletins/apsb11-08.html x_refsource_CONFIRM
• http://www.securitytracker.com/id?1025324 vdb-entryx_refsource_SECTRACK