Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.19140; and Authplay.dll (aka AuthPlayLib.bundle) in Adobe Reader 9.x before 9.4.4 and 10.x through 10.0.1 on Windows, Adobe Reader 9.x before 9.4.4 and 10.x before 10.0.3 on Mac OS X, and Adobe Acrobat 9.x before 9.4.4 and 10.x before 10.0.3 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted Flash content; as demonstrated by a Microsoft Office document with an embedded .swf file that has a size inconsistency in a "group of included constants," object type confusion, ActionScript that adds custom functions to prototypes, and Date objects; and as exploited in the wild in April 2011.

Specially crafted Flash files could be exploited to execute arbitrary code (CVE-2011-0611).

The version of HP Systems Insight Manager installed on the remote Windows host is affected by vulnerabilities in the following components :

  - TLS and SSL protocols
  - Apache Tomcat
  - Java
  - Flash Player
  - BlazeDS/GraniteDS
  - Adobe LiveCycle
  - Adobe Flex SDK
  - Systems Insight Manager

Specially crafted Flash files could be exploited to execute arbitrary code. (CVE-2011-0611)

The remote host is affected by the vulnerability described in GLSA-201110-11 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player.
      Please review the CVE identifiers and Adobe Security Advisories and       Bulletins referenced below for details.
  Impact :

    By enticing a user to open a specially crafted SWF file a remote       attacker could cause a Denial of Service or the execution of arbitrary       code with the privileges of the user running the application.
  Workaround :

    There is no known workaround at this time.

The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:0451 advisory.

  - flash-plugin: crash and potential arbitrary code execution (APSB11-07) (CVE-2011-0611)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Versions of Flash Player earlier than 10.2.159.1 are potentially affected by a memory corruption vulnerability.  By tricking a user on the affected system into opening a specially crafted document with Flash content, such as a SWF file embedded in a Microsoft Word document, and attacker can potentially leverage this issue to execute arbitrary code remotely on the system subject to the user's privileges. Note that there are reports that this issue is being exploited in the wild as of April 2011.

The remote Windows host contains a version of Adobe AIR earlier than 2.6.0.19140.  Such versions are reportedly affected by a memory corruption vulnerability. 

By tricking a user on the affected system into opening a specially crafted document with Flash content, such as a SWF file embedded in a Microsoft Word document, an attacker can potentially leverage this issue to execute arbitrary code remotely on the system subject to the user's privileges. 

Note that there are reports that this issue is being exploited in the wild as of April 2011.

The remote Windows host contains a version of Adobe Flash Player earlier than 10.2.159.1.  Such versions are reportedly affected by a memory corruption vulnerability. 

By tricking a user on the affected system into opening a specially crafted document with Flash content, such as a SWF file embedded in a Microsoft Word document, an attacker can potentially leverage this issue to execute arbitrary code remotely on the system subject to the user's privileges. 

Note that there are reports that this issue is being exploited in the wild as of April 2011.

Adobe Product Security Incident Response Team reports :

A critical vulnerability exists in Flash Player 10.2.153.1 and earlier versions (Adobe Flash Player 10.2.154.25 and earlier for Chrome users) for Windows, Macintosh, Linux and Solaris, Adobe Flash Player 10.2.156.12 and earlier versions for Android, and the Authplay.dll component that ships with Adobe Reader and Acrobat X (10.0.2) and earlier 10.x and 9.x versions for Windows and Macintosh operating systems.

This vulnerability (CVE-2011-0611) could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being exploited in the wild in targeted attacks via a malicious Web page or a Flash (.swf) file embedded in a Microsoft Word (.doc) or Microsoft Excel (.xls) file delivered as an email attachment, targeting the Windows platform. At this time, Adobe is not aware of any attacks via PDF targeting Adobe Reader and Acrobat. Adobe Reader X Protected Mode mitigations would prevent an exploit of this kind from executing.

The remote Windows host contains a version of Adobe Reader 9.x < 9.4.4 or 10.x <= 10.1.  Such versions are affected by multiple memory corruption vulnerabilities.

A remote attacker could exploit this by tricking a user into viewing a maliciously crafted PDF file, resulting in arbitrary code execution. 

Note that Adobe Reader X Protected Mode prevents an exploit of this kind from executing. 

Note also, CVE-2011-0611 is being exploited in the wild as of April 2011.

The remote Windows host contains a version of Adobe Acrobat 9.x < 9.4.4 or 10.x < 10.0.3. Such versions are affected by multiple memory corruption vulnerabilities.

A remote attacker could exploit this by tricking a user into viewing a malicious crafted PDF file, resulting in arbitrary code execution.

Note also, CVE-2011-0611 is being exploited in the wild as of April 2011.

Versions of Google Chrome earlier than 10.0.648.205 are potentially affected by multiple vulnerabilities :

  - Chrome uses a version of Adobe Flash player that is affected by an unspecified security vulnerability. (CVE-2011-0611)

 - An off-by-three error exists in the GPU process. (70070)

.  - A use-after-free issue exists in the GPU process. (75629)

  - A heap overflow issue exists in the GPU process. (78524)

ID	Name	Product	Family	Severity
75833	openSUSE Security Update : flash-player (openSUSE-SU-2011:0373-1)	Nessus	SuSE Local Security Checks	high
75497	openSUSE Security Update : flash-player (openSUSE-SU-2011:0373-1)	Nessus	SuSE Local Security Checks	high
59684	HP Systems Insight Manager < 7.0 Multiple Vulnerabilities	Nessus	Windows	critical
57189	SuSE 10 Security Update : flash-player (ZYPP Patch Number 7477)	Nessus	SuSE Local Security Checks	high
56504	GLSA-201110-11 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
53722	openSUSE Security Update : flash-player (openSUSE-SU-2011:0373-1)	Nessus	SuSE Local Security Checks	high
53485	SuSE 11.1 Security Update : flash-player (SAT Patch Number 4400)	Nessus	SuSE Local Security Checks	high
53482	RHEL 5 / 6 : flash-plugin (RHSA-2011:0451)	Nessus	Red Hat Local Security Checks	high
5892	Flash Player < 10.2.159.1 Unspecified Memory Corruption (APSB11-07)	Nessus Network Monitor	Web Clients	high
53474	Adobe AIR < 2.6.0.19140 ActionScript Predefined Class Prototype Addition Remote Code Execution (APSB11-07)	Nessus	Windows	high
53472	Flash Player < 10.2.159.1 ActionScript Predefined Class Prototype Addition Remote Code Execution (APSB11-07)	Nessus	Windows	high
53468	FreeBSD : linux-flashplugin -- remote code execution vulnerability (32b05547-6913-11e0-bdc4-001b2134ef46)	Nessus	FreeBSD Local Security Checks	high
53451	Adobe Reader 9.x / 10.x Multiple Vulnerabilities (APSB11-08)	Nessus	Windows	high
53450	Adobe Acrobat 9.x / 10.x Multiple Vulnerabilities (APSB11-08)	Nessus	Windows	high
800896	Google Chrome < 10.0.648.205 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
5891	Google Chrome < 10.0.648.205 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high

Detections

Analytics

CVE-2011-0611

high

Tenable Plugins

high

high

critical

high

critical

high

high

high

high

high

high

high

high

high

high

high