Vulnerabilities > CVE-2011-2458 - Permissions, Privileges, and Access Controls vulnerability in Adobe Flash Player

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

adobe

CWE-264

nessus

NVD

Published: 2011-11-11

Updated: 2018-11-29

Summary

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Flash Player 10.0.0.584 Adobe Flash Player 10.0.2.54 Adobe Flash Player 10.0.12.10 Adobe Flash Player 10.0.12.36 Adobe Flash Player 10.0.15.3 Adobe Flash Player 10.0.22.87 Adobe Flash Player 10.0.32.18 Adobe Flash Player 10.0.42.34 Adobe Flash Player 10.0.45.2 Adobe Flash Player 10.1 Adobe Flash Player 10.1.52.14 Adobe Flash Player 10.1.52.14.1 Adobe Flash Player 10.1.52.15 Adobe Flash Player 10.1.53.64 Adobe Flash Player 10.1.82.76 Adobe Flash Player 10.1.85.3 Adobe Flash Player 10.1.92.8 Adobe Flash Player 10.1.92.10 Adobe Flash Player 10.1.95.1 Adobe Flash Player 10.1.95.2 Adobe Flash Player 10.1.102.64 Adobe Flash Player 10.1.105.6 Adobe Flash Player 10.1.106.16 Adobe Flash Player 10.1.106.17 Adobe Flash Player 10.2.152 Adobe Flash Player 10.2.152.26 Adobe Flash Player 10.2.152.32 Adobe Flash Player 10.2.152.33 Adobe Flash Player 10.2.153.1 Adobe Flash Player 10.2.154.13 Adobe Flash Player 10.2.154.25 Adobe Flash Player 10.2.154.27 Adobe Flash Player 10.2.156.12 Adobe Flash Player 10.2.157.51 Adobe Flash Player 10.2.159.1 Adobe Flash Player 10.3 Adobe Flash Player 10.3.181.14 Adobe Flash Player 10.3.181.16 Adobe Flash Player 10.3.181.22 Adobe Flash Player 10.3.181.23 Adobe Flash Player 10.3.181.26 Adobe Flash Player 10.3.181.34 Adobe Flash Player 10.3.183.5 Adobe Flash Player 10.3.183.7 Adobe Flash Player 10.3.183.10 Adobe Flash Player 11.0 Adobe Flash Player 11.0.1.152 Adobe Flash Player 11.0.1.153 Adobe Flash Player 11.1 Adobe Flash Player 11.1.102.55 Adobe Adobe AIR 3.0.0.408 Adobe Adobe AIR 3.0.0.4080 Adobe Adobe AIR 3.1.0.485 Adobe Adobe AIR 3.1.0.488	56
OS	Apple Apple MAC OS X -	1
OS	Linux Linux Linux Kernel -	1
OS	Microsoft Microsoft Windows -	1
OS	Sun SUN Solaris -	1
OS	Google Google Android -	1

Common Weakness Enumeration (CWE)

CWE-264 - Permissions, Privileges, and Access Controls

Common Attack Pattern Enumeration and Classification (CAPEC)

Accessing, Modifying or Executing Executable Files
An attack of this type exploits a system's configuration that allows an attacker to either directly access an executable file, for example through shell access; or in a possible worst case allows an attacker to upload a file and then execute it. Web servers, ftp servers, and message oriented middleware systems which have many integration points are particularly vulnerable, because both the programmers and the administrators must be in synch regarding the interfaces and the correct privileges for each interface.
Leverage Executable Code in Non-Executable Files
An attack of this type exploits a system's trust in configuration and resource files, when the executable loads the resource (such as an image file or configuration file) the attacker has modified the file to either execute malicious code directly or manipulate the target process (e.g. application server) to execute based on the malicious configuration parameters. Since systems are increasingly interrelated mashing up resources from local and remote sources the possibility of this attack occurring is high. The attack can be directed at a client system, such as causing buffer overrun through loading seemingly benign image files, as in Microsoft Security Bulletin MS04-028 where specially crafted JPEG files could cause a buffer overrun once loaded into the browser. Another example targets clients reading pdf files. In this case the attacker simply appends javascript to the end of a legitimate url for a pdf (http://www.gnucitizen.org/blog/danger-danger-danger/) http://path/to/pdf/file.pdf#whatever_name_you_want=javascript:your_code_here The client assumes that they are reading a pdf, but the attacker has modified the resource and loaded executable javascript into the client's browser process. The attack can also target server processes. The attacker edits the resource or configuration file, for example a web.xml file used to configure security permissions for a J2EE app server, adding role name "public" grants all users with the public role the ability to use the administration functionality. The server trusts its configuration file to be correct, but when they are manipulated, the attacker gains full control.
Blue Boxing
This type of attack against older telephone switches and trunks has been around for decades. A tone is sent by an adversary to impersonate a supervisor signal which has the effect of rerouting or usurping command of the line. While the US infrastructure proper may not contain widespread vulnerabilities to this type of attack, many companies are connected globally through call centers and business process outsourcing. These international systems may be operated in countries which have not upgraded Telco infrastructure and so are vulnerable to Blue boxing. Blue boxing is a result of failure on the part of the system to enforce strong authorization for administrative functions. While the infrastructure is different than standard current applications like web applications, there are historical lessons to be learned to upgrade the access control for administrative functions.
Restful Privilege Elevation
Rest uses standard HTTP (Get, Put, Delete) style permissions methods, but these are not necessarily correlated generally with back end programs. Strict interpretation of HTTP get methods means that these HTTP Get services should not be used to delete information on the server, but there is no access control mechanism to back up this logic. This means that unless the services are properly ACL'd and the application's service implementation are following these guidelines then an HTTP request can easily execute a delete or update on the server side. The attacker identifies a HTTP Get URL such as http://victimsite/updateOrder, which calls out to a program to update orders on a database or other resource. The URL is not idempotent so the request can be submitted multiple times by the attacker, additionally, the attacker may be able to exploit the URL published as a Get method that actually performs updates (instead of merely retrieving data). This may result in malicious or inadvertent altering of data on the server.
Target Programs with Elevated Privileges
This attack targets programs running with elevated privileges. The attacker would try to leverage a bug in the running program and get arbitrary code to execute with elevated privileges. For instance an attacker would look for programs that write to the system directories or registry keys (such as HKLM, which stores a number of critical Windows environment variables). These programs are typically running with elevated privileges and have usually not been designed with security in mind. Such programs are excellent exploit targets because they yield lots of power when they break. The malicious user try to execute its code at the same level as a privileged system call.

Nessus

NASL family	Windows
NASL id	HP_SYSTEMS_INSIGHT_MANAGER_700_MULTIPLE_VULNS.NASL
description	The version of HP Systems Insight Manager installed on the remote Windows host is affected by vulnerabilities in the following components : - TLS and SSL protocols - Apache Tomcat - Java - Flash Player - BlazeDS/GraniteDS - Adobe LiveCycle - Adobe Flex SDK - Systems Insight Manager
last seen	2020-06-01
modified	2020-06-02
plugin id	59684
published	2012-06-15
reporter	This script is Copyright (C) 2012-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/59684
title	HP Systems Insight Manager < 7.0 Multiple Vulnerabilities
code	# # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(59684); script_version("1.19"); script_cvs_date("Date: 2018/11/15 20:50:27"); script_cve_id( "CVE-2009-3555", "CVE-2010-2227", "CVE-2010-4470", "CVE-2010-4476", "CVE-2011-0611", "CVE-2011-0786", "CVE-2011-0788", "CVE-2011-0802", "CVE-2011-0814", "CVE-2011-0815", "CVE-2011-0817", "CVE-2011-0862", "CVE-2011-0863", "CVE-2011-0864", "CVE-2011-0865", "CVE-2011-0866", "CVE-2011-0867", "CVE-2011-0868", "CVE-2011-0869", "CVE-2011-0871", "CVE-2011-0872", "CVE-2011-0873", "CVE-2011-2092", "CVE-2011-2093", "CVE-2011-2130", "CVE-2011-2134", "CVE-2011-2135", "CVE-2011-2136", "CVE-2011-2137", "CVE-2011-2138", "CVE-2011-2139", "CVE-2011-2140", "CVE-2011-2414", "CVE-2011-2415", "CVE-2011-2416", "CVE-2011-2417", "CVE-2011-2425", "CVE-2011-2426", "CVE-2011-2427", "CVE-2011-2428", "CVE-2011-2429", "CVE-2011-2430", "CVE-2011-2444", "CVE-2011-2445", "CVE-2011-2450", "CVE-2011-2451", "CVE-2011-2452", "CVE-2011-2453", "CVE-2011-2454", "CVE-2011-2455", "CVE-2011-2456", "CVE-2011-2457", "CVE-2011-2458", "CVE-2011-2459", "CVE-2011-2460", "CVE-2011-2461", "CVE-2011-3556", "CVE-2011-3557", "CVE-2011-3558", "CVE-2012-1995", "CVE-2012-1996", "CVE-2012-1997", "CVE-2012-1998", "CVE-2012-1999" ); script_bugtraq_id( 36935, 41544, 42817, 46091, 46387, 47314, 48133, 48134, 48135, 48136, 48137, 48138, 48139, 48140, 48141, 48142, 48143, 48144, 48145, 48146, 48147, 48148, 48149, 48267, 48279, 49073, 49074, 49075, 49076, 49077, 49079, 49080, 49081, 49082, 49083, 49084, 49085, 49086, 49710, 49714, 49715, 49716, 49717, 49718, 50618, 50619, 50620, 50621, 50622, 50623, 50624, 50625, 50626, 50627, 50628, 50629, 50869, 53315 ); script_xref(name:"HP", value:"HPSBMU02769"); script_xref(name:"HP", value:"SSRT100846"); script_xref(name:"HP", value:"SSRT100093"); script_xref(name:"HP", value:"SSRT090028"); script_xref(name:"HP", value:"SSRT100110"); script_xref(name:"HP", value:"SSRT100373"); script_xref(name:"HP", value:"SSRT100426"); script_xref(name:"HP", value:"SSRT100514"); script_xref(name:"HP", value:"SSRT100562"); script_xref(name:"HP", value:"SSRT100639"); script_xref(name:"HP", value:"SSRT100702"); script_xref(name:"HP", value:"SSRT100819"); script_name(english:"HP Systems Insight Manager < 7.0 Multiple Vulnerabilities"); script_summary(english:"Checks the version of HP Systems Insight Manager."); script_set_attribute(attribute:"synopsis", value: "The remote Windows host contains software that is affected by multiple vulnerabilities."); script_set_attribute(attribute:"description", value: "The version of HP Systems Insight Manager installed on the remote Windows host is affected by vulnerabilities in the following components : - TLS and SSL protocols - Apache Tomcat - Java - Flash Player - BlazeDS/GraniteDS - Adobe LiveCycle - Adobe Flex SDK - Systems Insight Manager"); script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?72e42ec4"); script_set_attribute(attribute:"solution", value:"Upgrade to HP Systems Insight Manager 7.0 or later."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C"); script_set_cvss_temporal_vector("CVSS2#E:H/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"Exploits are available"); script_set_attribute(attribute:"exploit_available", value:"true"); script_set_attribute(attribute:"exploit_framework_core", value:"true"); script_set_attribute(attribute:"exploited_by_malware", value:"true"); script_set_attribute(attribute:"metasploit_name", value:'Java RMI Server Insecure Default Configuration Java Code Execution'); script_set_attribute(attribute:"exploit_framework_metasploit", value:"true"); script_cwe_id(310); script_set_attribute(attribute:"vuln_publication_date", value:"2009/11/09"); script_set_attribute(attribute:"patch_publication_date", value:"2012/04/30"); script_set_attribute(attribute:"plugin_publication_date", value:"2012/06/15"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/a:hp:systems_insight_manager"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"Windows"); script_copyright(english:"This script is Copyright (C) 2012-2018 Tenable Network Security, Inc."); script_dependencies("hp_systems_insight_manager_installed.nasl"); script_require_keys("installed_sw/HP Systems Insight Manager"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("install_func.inc"); include("misc_func.inc"); app_name = "HP Systems Insight Manager"; get_install_count(app_name:app_name, exit_if_zero:TRUE); install = get_single_install(app_name:app_name); path = install['path']; version = install['version']; if (version =~ '^(([A-Z]\\.)?0[0-5]\\.\|([A-C]\\.)?0[0-6]\\.[0-9\\.]+)') { set_kb_item(name:'www/0/XSS', value:TRUE); set_kb_item(name:'www/0/XSRF', value:TRUE); port = get_kb_item('SMB/transport'); if (!port) port = 445; if (report_verbosity > 0) { report = '\n Path : ' + path + '\n Installed version : ' + version + '\n Fixed version : C.07.00.00.00' + '\n'; security_hole(port:port, extra:report); } else security_hole(port); } else audit(AUDIT_INST_PATH_NOT_VULN, app_name, version, path);

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_4_FLASH-PLAYER-111111.NASL
description	flash-player update to version 11.1.102.55 to fix the following critical security issues : CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460
last seen	2020-06-01
modified	2020-06-02
plugin id	75839
published	2014-06-13
reporter	This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/75839
title	openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-1)

NASL family	SuSE Local Security Checks
NASL id	OPENSUSE-2011-4.NASL
description	This update provides flash-player 11.1.102.55, which files the following critical security issues : - This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2445). - This update resolves a heap corruption vulnerability that could lead to code execution (CVE-2011-2450). - This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2451). - This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2452). - This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2453). - This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2454). - This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2455). - This update resolves a buffer overflow vulnerability that could lead to code execution (CVE-2011-2456). - This update resolves a stack overflow vulnerability that could lead to code execution (CVE-2011-2457). - This update resolves a vulnerability that could lead to a cross-domain policy bypass (Internet Explorer-only) (CVE-2011-2458). - This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2459). - This update resolves a memory corruption vulnerability that could lead to code execution (CVE-2011-2460).
last seen	2020-06-01
modified	2020-06-02
plugin id	74525
published	2014-06-13
reporter	This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/74525
title	openSUSE Security Update : flash-player (openSUSE-2011-4)

NASL family	FreeBSD Local Security Checks
NASL id	FREEBSD_PKG_0E8E12120CE511E1849B003067B2972C.NASL
description	Adobe Product Security Incident Response Team reports : Critical vulnerabilities have been identified in Adobe Flash Player 11.0.1.152 and earlier versions for Windows, Macintosh, Linux and Solaris, and Adobe Flash Player 11.0.1.153 and earlier versions for Android. In addition a patch was released for users of flash10.
last seen	2020-06-01
modified	2020-06-02
plugin id	56803
published	2011-11-14
reporter	This script is Copyright (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/56803
title	FreeBSD : linux-flashplugin -- multiple vulnerabilities (0e8e1212-0ce5-11e1-849b-003067b2972c)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_FLASH-PLAYER-111111.NASL
description	flash-player update to version 11.1.102.55 to fix the following critical security issues : CVE-2011-2445 / CVE-2011-2450 / CVE-2011-2451 / CVE-2011-2452 / CVE-2011-2453 / CVE-2011-2454 / CVE-2011-2455 / CVE-2011-2456 / CVE-2011-2457 / CVE-2011-2458 / CVE-2011-2459 / CVE-2011-2460
last seen	2020-06-01
modified	2020-06-02
plugin id	57102
published	2011-12-13
reporter	This script is Copyright (C) 2011-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/57102
title	SuSE 11.1 Security Update : flash-player (SAT Patch Number 5413)

NASL family	Windows
NASL id	FLASH_PLAYER_APSB11-28.NASL
description	According to its version, the instance of Flash Player installed on the remote Windows host is 10.x equal to or earlier than 10.3.183.10 or 11.x equal to or earlier than 11.0.1.152. It is, therefore, reportedly affected by several critical vulnerabilities : - Several unspecified memory corruption errors exist that could lead to code execution. (CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, CVE-2011-2460) - An unspecified heap corruption error exists that could lead to code execution. (CVE-2011-2450) - An unspecified buffer overflow error exists that could lead to code execution. (CVE-2011-2456) - An unspecified stack overflow error exists that could lead to code execution. (CVE-2011-2457) - An unspecified error related to Internet Explorer can allow cross-domain policy violations. (CVE-2011-2458)
last seen	2020-06-01
modified	2020-06-02
plugin id	56874
published	2011-11-18
reporter	This script is Copyright (C) 2011-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/56874
title	Flash Player <= 10.3.183.10 / 11.0.1.152 Multiple Vulnerabilities (APSB11-28)

NASL family	Gentoo Local Security Checks
NASL id	GENTOO_GLSA-201204-07.NASL
description	The remote host is affected by the vulnerability described in GLSA-201204-07 (Adobe Flash Player: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could entice a user to open a specially crafted SWF file, possibly resulting in execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker may be able to bypass intended access restrictions, bypass cross-domain policy, inject arbitrary web script, or obtain sensitive information. Workaround : There is no known workaround at this time.
last seen	2020-06-01
modified	2020-06-02
plugin id	59623
published	2012-06-21
reporter	This script is Copyright (C) 2012-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/59623
title	GLSA-201204-07 : Adobe Flash Player: Multiple vulnerabilities

NASL family	SuSE Local Security Checks
NASL id	SUSE_FLASH-PLAYER-7832.NASL
description	flash-player update to version 11.1.102.55 to fix the following critical
last seen	2020-06-01
modified	2020-06-02
plugin id	57195
published	2011-12-13
reporter	This script is Copyright (C) 2011-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/57195
title	SuSE 10 Security Update : flash-player (ZYPP Patch Number 7832)

NASL family	Solaris Local Security Checks
NASL id	SOLARIS11_FLASH_20120207.NASL
description	The remote Solaris system is missing necessary patches to address security updates : - Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460. (CVE-2011-2445) - Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors. (CVE-2011-2450) - Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460. (CVE-2011-2451) - Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460. (CVE-2011-2452) - Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460. (CVE-2011-2453) - Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460. (CVE-2011-2454) - Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2459, and CVE-2011-2460. (CVE-2011-2455) - Buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors. (CVE-2011-2456) - Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors. (CVE-2011-2457) - Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site. (CVE-2011-2458) - Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2460. (CVE-2011-2459) - Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2459. (CVE-2011-2460)
last seen	2020-06-01
modified	2020-06-02
plugin id	80611
published	2015-01-19
reporter	This script is Copyright (C) 2015-2018 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/80611
title	Oracle Solaris Third-Party Patch Update : flash (multiple_vulnerabilities_in_adobe_flashplayer4)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_3_FLASH-PLAYER-110921.NASL
description	flash-player update to version 11.1.102.55 to fix the following critical security issues : CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460
last seen	2020-06-01
modified	2020-06-02
plugin id	75502
published	2014-06-13
reporter	This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/75502
title	openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-1)

NASL family	MacOS X Local Security Checks
NASL id	MACOSX_ADOBE_READER_APSA11-04.NASL
description	The version of Adobe Reader installed on the remote Mac OS X host is prior or equal to 10.1.1 or 9.4.6. It is, therefore, affected by a memory corruption issue related to the Universal 3D (U3D) file format. A remote attacker can exploit this, by convincing a user to view a maliciously crafted PDF file, to cause an application crash or to execute arbitrary code. Note that the Adobe Reader X user-specific option to use
last seen	2020-06-01
modified	2020-06-02
plugin id	57044
published	2011-12-07
reporter	This script is Copyright (C) 2011-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/57044
title	Adobe Reader <= 10.1.1 / 9.4.6 U3D Memory Corruption (APSA11-04, APSB11-28, APSB11-30, APSB12-01) (Mac OS X)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_4_FLASH-PLAYER-111115.NASL
description	flash-player update to version 11.1.102.55 to fix the following critical security issues : CVE-2011-2445, CVE-2011-2450, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2456, CVE-2011-2457, CVE-2011-2458, CVE-2011-2459, CVE-2011-2460
last seen	2020-06-01
modified	2020-06-02
plugin id	75840
published	2014-06-13
reporter	This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/75840
title	openSUSE Security Update : flash-player (openSUSE-SU-2011:1240-2)

NASL family	Windows
NASL id	ADOBE_AIR_APSB11-28.NASL
description	According to its version, the instance of Adobe AIR installed on the remote Windows host is 3.0 or earlier and is reportedly affected by several critical vulnerabilities : - Several unspecified memory corruption errors exist that could lead to code execution. (CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, CVE-2011-2460) - An unspecified heap corruption error exists that could lead to code execution. (CVE-2011-2450) - An unspecified buffer overflow error exists that could lead to code execution. (CVE-2011-2456) - An unspecified stack overflow error exists that could lead to code execution. (CVE-2011-2457) - An unspecified error related to Internet Explorer can allow cross-domain policy violations. (CVE-2011-2458) By tricking a user on the affected system into opening a specially crafted document with Flash content, an attacker could leverage these vulnerabilities to execute arbitrary code remotely on the system subject to the user
last seen	2020-06-01
modified	2020-06-02
plugin id	56959
published	2011-11-28
reporter	This script is Copyright (C) 2011-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/56959
title	Adobe AIR <= 3.0 Multiple Vulnerabilities (APSB11-28)

Oval

accepted

2015-08-03T04:00:30.981-04:00

class

vulnerability

contributors

name Aharon Chernin
organization DTCC
name Scott Quint
organization DTCC
name Scott Quint
organization DTCC
name Josh Turpin
organization Symantec Corporation
name Josh Turpin
organization Symantec Corporation
name David Rothenberg
organization The MITRE Corporation
name Shane Shaffer
organization G2, Inc.
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Mikhno
organization ALTX-SOFT
name Maria Mikhno
organization ALTX-SOFT
name Maria Mikhno
organization ALTX-SOFT
name Maria Mikhno
organization ALTX-SOFT
name Evgeniy Pavlov
organization ALTX-SOFT
name Maria Mikhno
organization ALTX-SOFT

definition_extensions

comment Adobe Flash Player 10 is installed
oval oval:org.mitre.oval:def:7610
comment Adobe Flash Player 9 is installed
oval oval:org.mitre.oval:def:7402
comment Adobe Flash Player is installed
oval oval:org.mitre.oval:def:6700
comment Adobe AIR is installed
oval oval:org.mitre.oval:def:7479
comment Adobe Flash Player is installed
oval oval:org.mitre.oval:def:6700
comment Adobe AIR is installed
oval oval:org.mitre.oval:def:7479
comment Adobe AIR is installed
oval oval:org.mitre.oval:def:7479
comment Adobe Flash Player is installed
oval oval:org.mitre.oval:def:6700
comment Adobe Flash Player is installed
oval oval:org.mitre.oval:def:6700
comment ActiveX Control is installed
oval oval:org.mitre.oval:def:26707

description

family

windows

oval:org.mitre.oval:def:14014

status

accepted

submitted

2011-11-25T18:29:03.000-05:00

title

version

accepted

2013-02-04T04:00:49.284-05:00

class

vulnerability

contributors

name	Shane Shaffer
organization	G2, Inc.

definition_extensions

comment Adobe Flash Player is Installed
oval oval:org.mitre.oval:def:12319
comment Adobe Flash Player 11 is installed
oval oval:org.mitre.oval:def:16112
comment Adobe AIR is installed
oval oval:org.mitre.oval:def:15988

description

family

macos

oval:org.mitre.oval:def:16179

status

accepted

submitted

2012-12-20T15:35:55.661-05:00

title

version

Seebug

bulletinFamily	exploit
description	BUGTRAQ ID: 50629 CVE ID: CVE-2011-2458 Adobe Flash Player是一个集成的多媒体播放器。 Adobe Flash Player在实现上存在安全限制绕过漏洞，远程攻击者可利用此漏洞绕过某些同源策略限制。 Adobe Flash Player 9.x Adobe Flash Player 10.x Adobe AIR 3.x 厂商补丁： Adobe ----- Adobe已经为此发布了一个安全公告（APSB11-28）以及相应补丁: APSB11-28：Security update available for Adobe Flash Player 链接：http://www.adobe.com/support/security/bulletins/apsb11-28.html
id	SSV:23200
last seen	2017-11-19
modified	2011-11-16
published	2011-11-16
reporter	Root
title	Adobe Flash Player跨域安全限制绕过漏洞

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Nessus

Oval

Seebug

References