CVE-2011-0572

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.

CVSS 2.0 · 9.3 Critical EPSS 5.2% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras

CVE-2011-0573

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.

CVSS 2.0 · 9.3 Critical EPSS 5.5% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras

CVE-2011-0574

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.

CVSS 2.0 · 9.3 Critical EPSS 5.2% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras

CVE-2011-0575

flash-plugin: multiple code execution flaws (APSB11-02)

Untrusted search path vulnerability in Adobe Flash Player before 10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in the current working directory.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras

CVE-2011-0577

flash-plugin: multiple code execution flaws (APSB11-02)

Unspecified vulnerability in Adobe Flash Player before 10.2.152.26 allows remote attackers to execute arbitrary code via a crafted font.

CVSS 2.0 · 9.3 Critical EPSS 7.7% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras

CVE-2011-0578

flash-plugin: multiple code execution flaws (APSB11-02)

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors related to a constructor for an unspecified ActionScript3 object and improper type checking, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0607, and CVE-2011-0608.

CVSS 2.0 · 9.3 Critical EPSS 6.1% KEV · Not listed

Vendors

Adobe Redhat

Products

Flash Player Rhel Extras

CVE-2011-0579

flash-plugin: crash and potential arbitrary code execution (APSB11-12)

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to obtain sensitive information via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 3.9% KEV · Not listed

Vendors

Adobe Apple Google and 4 more

Products

Flash Player Mac Os X Android and 4 more

CVE-2011-0585

acroread: critical APSB11-03

Unspecified vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0565.

CVSS 2.0 · 9.3 Critical EPSS 6.0% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0586

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X do not properly validate unspecified input data, which allows attackers to execute arbitrary code via unknown vectors.

CVSS 2.0 · 9.3 Critical EPSS 6.2% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0587

acroread: multiple XSS flaws (APSB11-03)

Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-0604.

CVSS 2.0 · 4.3 Medium EPSS 3.2% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0589

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0563 and CVE-2011-0606.

CVSS 2.0 · 9.3 Critical EPSS 5.0% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0590

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a 3D file, a different vulnerability than CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, CVE-2011-0595, and CVE-2011-0600.

CVSS 2.0 · 9.3 Critical EPSS 6.4% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0591

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, related to Texture and rgba, a different vulnerability than CVE-2011-0590, CVE-2011-0592, CVE-2011-0593, CVE-2011-0595, and CVE-2011-0600.

CVSS 2.0 · 9.3 Critical EPSS 47.6% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0592

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, related to "Texture bmp," a different vulnerability than CVE-2011-0590, CVE-2011-0591, CVE-2011-0593, CVE-2011-0595, and CVE-2011-0600.

CVSS 2.0 · 9.3 Critical EPSS 47.6% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0593

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, a different vulnerability than CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0595, and CVE-2011-0600.

CVSS 2.0 · 9.3 Critical EPSS 49.5% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0594

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a font.

CVSS 2.0 · 9.3 Critical EPSS 7.2% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0602

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via crafted JP2K record types in a JPEG2000 image in a PDF file, which causes heap corruption, a different vulnerability than CVE-2011-0596, CVE-2011-0598, and CVE-2011-0599.

CVSS 2.0 · 9.3 Critical EPSS 7.2% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0595

acroread: critical APSB11-03

Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via a crafted Universal 3D (U3D) file that triggers a buffer overflow during decompression, a different vulnerability than CVE-2011-0590, CVE-2011-0591, CVE-2011-0592, CVE-2011-0593, and CVE-2011-0600.

CVSS 2.0 · 9.3 Critical EPSS 9.9% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0596

acroread: critical APSB11-03

The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via an image with crafted (1) height and (2) width values for an RLE_8 compressed bitmap, which triggers a heap-based buffer overflow, a different vulnerability than CVE-2011-0598, CVE-2011-0599, and CVE-2011-0602.

CVSS 2.0 · 9.3 Critical EPSS 7.2% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more

CVE-2011-0598

acroread: critical APSB11-03

Integer overflow in ACE.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allows remote attackers to execute arbitrary code via crafted ICC data, a different vulnerability than CVE-2011-0596, CVE-2011-0599, and CVE-2011-0602.

CVSS 2.0 · 9.3 Critical EPSS 9.8% KEV · Not listed

Vendors

Adobe Apple Microsoft and 1 more

Products

Acrobat Acrobat Reader Mac Os X and 2 more