Detections
Analytics
Flash Player < 10.2.153.1 Unspecified Memory Corruption (APSB11-05)
high Nessus Plugin ID 52673
Language:
Synopsis
The remote Windows host contains a browser plug-in that is affected by a memory corruption vulnerability.Description
The remote Windows host contains a version of Adobe Flash Player earlier than 10.2.153.1. Such versions are affected by an unspecified memory corruption vulnerability.A remote attacker could exploit this by tricking a user into viewing maliciously crafted SWF content, resulting in arbitrary code execution.
This bug is currently being exploited in the wild.
Solution
Upgrade to Flash Player 10.2.153.1 or later.See Also
http://www.nessus.org/u?82775d9e
http://www.adobe.com/support/security/advisories/apsa11-01.html
http://www.adobe.com/support/security/bulletins/apsb11-05.html
Plugin Details
Severity: High
ID: 52673
File Name: flash_player_apsa11-01.nasl
Version: 1.18
Type: local
Agent: windows
Family: Windows
Published: 3/15/2011
Updated: 6/8/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Critical
Score: 9.6
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 8.1
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2011-0609
Vulnerability Information
CPE: cpe:/a:adobe:flash_player
Required KB Items: SMB/Flash_Player/installed
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 3/21/2011
Vulnerability Publication Date: 3/14/2011
CISA Known Exploited Vulnerability Due Dates: 6/22/2022
Exploitable With
Core Impact
Metasploit (Adobe Flash Player AVM Bytecode Verification Vulnerability)
Reference Information
CVE: CVE-2011-0609
BID: 46860