Adobe Flash Player Remote Memory Corruption Vulnerability

Publish date: March 06, 2013
  Severity: CRITICAL
  CVE Identifier: CVE-2011-2110
  Advisory Date: JUN 15, 2011

  DESCRIPTION

A vulnerability exists in certain versions of Adobe Flash Player for Windows, Macintosh, Linux, Solaris, and some versions of Android operating systems. When exploited, the said vulnerability may allow a remote attacker to take control of the affected system.

  TREND MICRO PROTECTION INFORMATION

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  SOLUTION

  PATCH: http://www.adobe.com/support/security/bulletins/apsb11-18.html

  Trend Micro Deep Security DPI Rule Number: 1004704
  Trend Micro Deep Security DPI Rule Name: Adobe Flash Player Remote Memory Corruption Vulnerability (CVE-2011-2110)

  AFFECTED SOFTWARE AND VERSION

  • Adobe Flash Player 10.3.181.23 and earlier - network distribution
  • Adobe Flash Player 10.3.181.23 and earlier for Android
  • Adobe Flash Player 10.3.185.23 and earlier for Android
  • Adobe Flash Player integrated with Google Chrome

  OTHER INFORMATION

12 Security Predictions for 2012

Featured Stories