CVE-2011-2417

Executive Summary

Informations
Name	CVE-2011-2417	First vendor Publication	2011-08-10
Vendor	Cve	Last vendor Modification	2012-03-22

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2417

CWE : Common Weakness Enumeration

id	Name
CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:15998

Oval ID:	oval:org.mitre.oval:def:15998
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
Family:	macos	Class:	vulnerability
Reference(s):	CVE-2011-2417	Version:	3
Platform(s):	Apple Mac OS X	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Adobe Flash Player before 10.3.183.5 installed Adobe Flash Player is Installed AND Version of Adobe Flash Player is less than 10.3.183.5 OR Adobe AIR before 2.7.1 is installed Adobe AIR is installed AND Version of Adobe AIR is less than 2.7.1

Definition Id: oval:org.mitre.oval:def:14015

Oval ID:	oval:org.mitre.oval:def:14015
Title:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
Description:	Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-2417	Version:	10
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000	Product(s):	Adobe Flash Player Adobe Air
Definition Synopsis:
Determine if the version of Adobe Flash Player on Windows is less than or equal to 10.3.181.34 Adobe Flash Player 10 is installed AND Determine if the version of Adobe Flash Player on Windows is less than or equal to 10.3.181.34 OR Determine if the version of Adobe Flash Player is less than or equal to 9.125.0 Adobe Flash Player 9 is installed AND Determine if the version of Adobe Flash Player is less than or equal to 9.125.0 OR Determine if the version of Adobe Flash Player is less than or equal to 7.2 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal to 7.2 OR Determine if the version of Adobe Flash Player is less than or equal to 6.0.79 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal to 6.0.79 OR Determine if the version of Adobe Air is less than or equal to 1.5.3 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal to 1.5.3 OR Determine if the version of Adobe Flash Player is less than or equal to 8.0.42.0 Adobe Flash Player is installed AND Determine if the version of Adobe Flash Player is less than or equal to 8.0.42.0 OR Determine if the version of Adobe Air is less than or equal to 2.7 Adobe AIR is installed AND Determine if the version of Adobe Air is less than or equal to 2.7

CPE : Common Platform Enumeration

Type	Description	Count
Application	Adobe Adobe Air cpe:/a:adobe:adobe_air:2.7 cpe:/a:adobe:adobe_air:2.6 cpe:/a:adobe:adobe_air:2.0.4 cpe:/a:adobe:adobe_air:2.0.3 cpe:/a:adobe:adobe_air:2.0.2 cpe:/a:adobe:adobe_air:1.5.3 cpe:/a:adobe:adobe_air:1.5.2 cpe:/a:adobe:adobe_air:1.5 cpe:/a:adobe:adobe_air:1.1 cpe:/a:adobe:adobe_air:1.0	10
Application	Adobe Flash Player cpe:/a:adobe:flash_player:10.3.185.25 cpe:/a:adobe:flash_player:10.3.185.23 cpe:/a:adobe:flash_player:10.3.185.21 cpe:/a:adobe:flash_player:10.3.181.36 cpe:/a:adobe:flash_player:10.3.181.34 cpe:/a:adobe:flash_player:10.3.181.23 cpe:/a:adobe:flash_player:10.3.181.16 cpe:/a:adobe:flash_player:10.3.181.14 cpe:/a:adobe:flash_player:10.2.159.1 cpe:/a:adobe:flash_player:10.2.157.51 cpe:/a:adobe:flash_player:10.2.156.12 cpe:/a:adobe:flash_player:10.2.154.25 cpe:/a:adobe:flash_player:10.2.154.13 cpe:/a:adobe:flash_player:10.2.152.33 cpe:/a:adobe:flash_player:10.2.152.32 cpe:/a:adobe:flash_player:10.2.152 cpe:/a:adobe:flash_player:10.1.95.2 cpe:/a:adobe:flash_player:10.1.95.1 cpe:/a:adobe:flash_player:10.1.92.8 cpe:/a:adobe:flash_player:10.1.92.10 cpe:/a:adobe:flash_player:10.1.85.3 cpe:/a:adobe:flash_player:10.1.82.76 cpe:/a:adobe:flash_player:10.1.53.64 cpe:/a:adobe:flash_player:10.1.52.15 cpe:/a:adobe:flash_player:10.1.52.14.1 cpe:/a:adobe:flash_player:10.1.106.16 cpe:/a:adobe:flash_player:10.1.105.6 cpe:/a:adobe:flash_player:10.1.102.64 cpe:/a:adobe:flash_player:10.0.45.2 cpe:/a:adobe:flash_player:10.0.42.34 cpe:/a:adobe:flash_player:10.0.32.18 cpe:/a:adobe:flash_player:10.0.22.87 cpe:/a:adobe:flash_player:10.0.15.3 cpe:/a:adobe:flash_player:10.0.12.36 cpe:/a:adobe:flash_player:10.0.12.10 cpe:/a:adobe:flash_player:10.0.0.584 cpe:/a:adobe:flash_player:9.125.0 cpe:/a:adobe:flash_player:9.0.48.0 cpe:/a:adobe:flash_player:9.0.47.0 cpe:/a:adobe:flash_player:9.0.45.0 cpe:/a:adobe:flash_player:9.0.31.0 cpe:/a:adobe:flash_player:9.0.31 cpe:/a:adobe:flash_player:9.0.283.0 cpe:/a:adobe:flash_player:9.0.28.0 cpe:/a:adobe:flash_player:9.0.28 cpe:/a:adobe:flash_player:9.0.277.0 cpe:/a:adobe:flash_player:9.0.262.0 cpe:/a:adobe:flash_player:9.0.260.0 cpe:/a:adobe:flash_player:9.0.246.0 cpe:/a:adobe:flash_player:9.0.20.0 cpe:/a:adobe:flash_player:9.0.20 cpe:/a:adobe:flash_player:9.0.18d60 cpe:/a:adobe:flash_player:9.0.16 cpe:/a:adobe:flash_player:9.0.159.0 cpe:/a:adobe:flash_player:9.0.155.0 cpe:/a:adobe:flash_player:9.0.152.0 cpe:/a:adobe:flash_player:9.0.151.0 cpe:/a:adobe:flash_player:9.0.125.0 cpe:/a:adobe:flash_player:9.0.124.0 cpe:/a:adobe:flash_player:9.0.115.0 cpe:/a:adobe:flash_player:9.0.114.0 cpe:/a:adobe:flash_player:9.0.112.0 cpe:/a:adobe:flash_player:9 cpe:/a:adobe:flash_player:8.0.42.0 cpe:/a:adobe:flash_player:8.0.39.0 cpe:/a:adobe:flash_player:8.0.35.0 cpe:/a:adobe:flash_player:8.0.34.0 cpe:/a:adobe:flash_player:8.0.33.0 cpe:/a:adobe:flash_player:8.0.24.0 cpe:/a:adobe:flash_player:8.0.22.0 cpe:/a:adobe:flash_player:8.0 cpe:/a:adobe:flash_player:8 cpe:/a:adobe:flash_player:7.2 cpe:/a:adobe:flash_player:7.1.1 cpe:/a:adobe:flash_player:7.1 cpe:/a:adobe:flash_player:7.0.73.0 cpe:/a:adobe:flash_player:7.0.70.0 cpe:/a:adobe:flash_player:7.0.69.0 cpe:/a:adobe:flash_player:7.0.68.0 cpe:/a:adobe:flash_player:7.0.67.0 cpe:/a:adobe:flash_player:7.0.66.0 cpe:/a:adobe:flash_player:7.0.63 cpe:/a:adobe:flash_player:7.0.61.0 cpe:/a:adobe:flash_player:7.0.60.0 cpe:/a:adobe:flash_player:7.0.53.0 cpe:/a:adobe:flash_player:7.0.25 cpe:/a:adobe:flash_player:7.0.24.0 cpe:/a:adobe:flash_player:7.0.19.0 cpe:/a:adobe:flash_player:7.0.14.0 cpe:/a:adobe:flash_player:7.0.1 cpe:/a:adobe:flash_player:7.0 cpe:/a:adobe:flash_player:7 cpe:/a:adobe:flash_player:6.0.79 cpe:/a:adobe:flash_player:6.0.21.0	94

Open Source Vulnerability Database (OSVDB)

id	Description
74443	Adobe Flash Player Unspecified Memory Corruption (2011-2417)

Internal Sources (Detail)

Source	Url
BID	http://www.securityfocus.com/bid/49084
CERT	http://www.us-cert.gov/cas/techalerts/TA11-222A.html
CONFIRM	http://www.adobe.com/support/security/bulletins/apsb11-21.html
REDHAT	http://www.redhat.com/support/errata/RHSA-2011-1144.html
SUSE	http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-10 23:02:23	Multiple Updates

Type	Count
Oval ID(s)	2
CPE ID(s)	104
osvdb(s)	1

Related	Severity
TA11-222A	(Critical)
RHSA-2011:1434	(Critical)
RHSA-2011:1144	(Critical)
GLSA-201201-19	(Critical)
GLSA-201110-11	(Critical)

Same Subject	Severity
Login to view 100 more Alert(s)

CVE-2011-2417

Executive Summary

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

Open Source Vulnerability Database (OSVDB)

Internal Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU