Vulnerability · NVD

CVE-2011-0611

CVE-2011-0611, high severity (CVSS 8.8): 3 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): 8.8
Exploitation: 99.4 %
Tracked apps: 3
Still exposed: 0

Published on 2011-04-13

Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

Attack vector : Network No privileges required

Show raw CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS 99.41% exploit likely percentile 99.9%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Adobe Acrobat Reader (64-bit) Windows winget:Adobe.Acrobat.Reader.64-bit

Affected ≥9.0 <9.4.4 Fixed in 9.4.4 Latest tracked 26.002.21869 patched
Chrome macOS com.google.Chrome

Affected <10.0.648.205 Fixed in 10.0.648.205 Latest tracked - undetermined
Google Chrome Windows winget:Google.Chrome

Affected <10.0.648.205 Fixed in 10.0.648.205 Latest tracked 152.0.7977.65 patched

NVD references 13 distinct products for this CVE : only those tracked by Scout (mobile and desktop catalog apps) are listed above. Libraries, servers and out-of-scope products do not appear here. Full list on NVD ↗

Vulnerable CPE configurations (6)

Vendor	Product	Platform	Versions	CPE 2.3 URI
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	≥9.0 <9.4.4	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	≥10.0 ≤10.0.1	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	≥9.0 <9.4.4	cpe:2.3:a:adobe:acrobat_reader::::::::
adobe	acrobat_reader All platforms (wildcard)	All platforms (wildcard)	≥10.0 <10.0.3	cpe:2.3:a:adobe:acrobat_reader::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	<10.0.648.205	cpe:2.3:a:google:chrome::::::::
google	chrome All platforms (wildcard)	All platforms (wildcard)	<10.0.648.205	cpe:2.3:a:google:chrome::::::::

View on NVD ↗ Advisory · lists.opensuse.org