CVE-2011-0609

Katalog CVE

CVSS 7.8 · High KEV · sudah dieksploitasi EPSS 63,5%

Kerentanan pada adobe flash player, adobe acrobat +5 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 8 Juni 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X, Linux, and Solaris; 10.1.106.16 and earlier on Android; Adobe AIR 2.5.1 and earlier; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader and Acrobat 9.x through 9.4.2 and 10.x through 10.0.1 on Windows and Mac OS X, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content, as demonstrated by a .swf file embedded in an Excel spreadsheet, and as exploited in the wild in March 2011.

Rincian

Terbit di NVD

15 Maret 2011

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

63,5% peluang dieksploitasi; lebih tinggi dari 99,1% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Adobe Flash Player Unspecified Vulnerability

Masuk KEV

8 Juni 2022

Tenggat CISA

22 Juni 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

The impacted product is end-of-life and should be disconnected if still in use.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.adobe.com/support/security/advisories/apsa11-01.html advisory vendor
• http://www.kb.cert.org/vuls/id/192052 advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-0609 pemerintah AS
• http://googlechromereleases.blogspot.com/2011/03/stable-and-beta-channel-updates_15.html advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html mailing list · advisory pihak ketiga
• http://www.securityfocus.com/bid/46860 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id?1025210 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id?1025211 broken link · advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id?1025238 broken link · advisory pihak ketiga · vdb entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66078 advisory pihak ketiga · vdb entry
• http://blogs.adobe.com/asset/2011/03/background-on-apsa11-01-patch-schedule.html broken link
• http://secunia.com/advisories/43751 broken link
• http://secunia.com/advisories/43757 broken link
• http://secunia.com/advisories/43772 broken link
• http://secunia.com/advisories/43856 broken link
• http://securityreason.com/securityalert/8152 broken link
• http://www.adobe.com/support/security/bulletins/apsb11-06.html not applicable
• http://www.redhat.com/support/errata/RHSA-2011-0372.html broken link
• http://www.vupen.com/english/advisories/2011/0655 broken link
• http://www.vupen.com/english/advisories/2011/0656 broken link
• http://www.vupen.com/english/advisories/2011/0688 broken link
• http://www.vupen.com/english/advisories/2011/0732 broken link
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14147 broken link