جزئیات آسیب‌پذیری

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

• http://www.securityfocus.com/bid/46860 vdb-entryx_refsource_BID
• http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html x_refsource_MISC
• http://www.vupen.com/english/advisories/2011/0732 vdb-entryx_refsource_VUPEN
• http://www.adobe.com/support/security/advisories/apsa11-01.html x_refsource_CONFIRM
• http://secunia.com/advisories/43751 third-party-advisoryx_refsource_SECUNIA
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14147 vdb-entrysignaturex_refsource_OVAL
• http://www.vupen.com/english/advisories/2011/0656 vdb-entryx_refsource_VUPEN
• http://www.securitytracker.com/id?1025211 vdb-entryx_refsource_SECTRACK
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html vendor-advisoryx_refsource_SUSE
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66078 vdb-entryx_refsource_XF
• http://www.vupen.com/english/advisories/2011/0655 vdb-entryx_refsource_VUPEN
• http://www.securitytracker.com/id?1025210 vdb-entryx_refsource_SECTRACK
• http://secunia.com/advisories/43856 third-party-advisoryx_refsource_SECUNIA
• http://www.kb.cert.org/vuls/id/192052 third-party-advisoryx_refsource_CERT-VN
• http://secunia.com/advisories/43772 third-party-advisoryx_refsource_SECUNIA
• http://www.adobe.com/support/security/bulletins/apsb11-06.html x_refsource_CONFIRM
• http://securityreason.com/securityalert/8152 third-party-advisoryx_refsource_SREASON
• http://www.securitytracker.com/id?1025238 vdb-entryx_refsource_SECTRACK
• http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html x_refsource_CONFIRM
• http://www.redhat.com/support/errata/RHSA-2011-0372.html vendor-advisoryx_refsource_REDHAT
• http://secunia.com/advisories/43757 third-party-advisoryx_refsource_SECUNIA
• http://www.vupen.com/english/advisories/2011/0688 vdb-entryx_refsource_VUPEN
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-0609 government-resource