Revision Date: | 2015-08-03 | Version: | 61 | Title: | Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011. | Description: | Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011. | Family: | windows | Class: | vulnerability | Status: | ACCEPTED | Reference(s): | CVE-2011-0611
| Platform(s): | Microsoft Windows 2000 Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Vista Microsoft Windows XP
| Product(s): | Adobe Acrobat Adobe Air Adobe Flash Player Adobe Reader
| Definition Synopsis | Determine if the version of Adobe Flash Player is less than or equal 9.125.0 Adobe Flash Player 9 is installed
AND Determine if the version of Adobe Flash Player is less than or equal 9.125.0
OR Determine if the version of Adobe Acrobat is less than or equal 10.0.2
Adobe Acrobat 10.x is installed
AND Determine if the version of Adobe Acrobat is less than or equal 10.0.2
OR Determine if the version of Adobe Flash Player is less than or equal 7.2
Adobe Flash Player is installed
AND Determine if the version of Adobe Flash Player is less than or equal 7.2
OR Determine if the version of Adobe Flash Player is less than or equal 6.0.79
Adobe Flash Player is installed
AND Determine if the version of Adobe Flash Player is less than or equal 6.0.79
OR Determine if the version of Adobe Air is less than or equal 1.5.3
Adobe AIR is installed
AND _
OR Determine if the version of Adobe Flash Player is less than or equal 10.2.156.12
Adobe Flash Player 10 is installed
AND Determine if the version of Adobe Flash Player is less than or equal 10.2.156.12
OR Determine if the version of Adobe Reader is less than or equal 9.4.3
Adobe Reader 9 Series is installed
AND Determine if the version of Adobe Reader is less than or equal 9.4.3
OR Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0
Adobe Flash Player is installed
AND Determine if the version of Adobe Flash Player is less than or equal 8.0.42.0
OR Determine if the version of Adobe Acrobat is less than or equal 9.4.3
Adobe Acrobat 9 Series is installed
AND Determine if the version of Adobe Acrobat is less than or equal 9.4.3
OR Determine if the version of Adobe Air is less than or equal 2.6
Adobe AIR is installed
AND Determine if the version of Adobe Air is less than or equal 2.6
OR Determine if the version of Adobe Reader is less than or equal 10.0
Adobe Reader 10.x is installed
AND Determine if the version of Adobe Reader is less than or equal to 10.0
OR Flash.ocx section
ActiveX Control is installed
AND Flash.ocx versions section
Determine if the version of Flash.ocx is less than or equal 9.125.0
OR Determine if the version of Flash.ocx is less than or equal 7.2
OR Determine if the version of Flash.ocx is less than or equal 6.0.79
OR Determine if the version of Flash.ocx is less than or equal 10.2.156.12
OR Determine if the version of Flash.ocx is less than or equal 8.0.42.0
|
|