Adobe AIR, Adobe Flash Player, Google Chrome, RHEL Supplementary, Red Hat Enterprise Linux Supplementary

ソフト名：Adobe AIR 2.7以下, Adobe Flash Player 10.3.185.25以下(Android)/10.3.181.36以下(Windows/Macintosh/Linux/Solaris), Google Chrome 13.0.782.112未満, RHEL Supplementary (v. 5 server)/Desktop Supplementary (v. 5 client), Red Hat Enterprise Linux Desktop Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6)

回避策：アップデート, APSB11-21にて対応, アップデートにて対応, RHSA-2011:1144-1にて対応

脆弱性：機密情報の奪取, システムアクセス, バッファオーバーフロー, リモートコード実行, 不特定のエラー, メモリ破壊, 整数オーバーフローエラー

ソース：

http://www.adobe.com/products/air/

http://www.adobe.com/products/flashplayer/

http://www.google.co.jp/chrome/intl/ja/landing_ff.html

http://www.redhat.com/

http://www.adobe.com/support/security/bulletins/apsb11-21.html

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=935

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=936

http://googlechromereleases.blogspot.com/2011/08/stable-channel-update_09.html

https://rhn.redhat.com/errata/RHSA-2011-1144.html

http://secunia.com/advisories/45529/

http://secunia.com/advisories/45583/

http://secunia.com/advisories/45593/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2130

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2134

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2135

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2136

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2137

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2138

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2139

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2140

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2414

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2415

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2416

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2417

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2425

CVE：CVE-2011-2130, CVE-2011-2134, CVE-2011-2135, CVE-2011-2136, CVE-2011-2137, CVE-2011-2138, CVE-2011-2139, CVE-2011-2140, CVE-2011-2414, CVE-2011-2415, CVE-2011-2416, CVE-2011-2417, CVE-2011-2425

危険性：High Risk

Novell openSUSE

ソフト名：Novell openSUSE 11.2/11.3/11.4 (Adobe Flash Player 10.2.159.1未満, Adobe AIR 2.6.19140未満)

回避策：openSUSE-SU-2011:0373-1, SUSE-SA:2011:018にて対応

脆弱性：システムアクセス, 未特定のエラー, リモートコード実行, Word文書(.doc)の悪用

ソース：http://www.opensuse.org/en/

https://hermes.opensuse.org/messages/8138626

http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00004.html

http://secunia.com/advisories/44119/

http://secunia.com/advisories/44244/

http://dvw-j.blogspot.com/2011/04/adobe-flash-player-adobe-acrobat-adobe.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0611

CVE：CVE-2011-0611

危険性：High Risk

Red Hat Enterprise Linux

ソフト名：Red Hat Enterprise Linux Desktop Supplementary (v. 5 client)/Supplementary (v. 5 server)/Desktop Supplementary (v. 6)/Server Supplementary (v. 6)/Workstation Supplementary (v. 6) (Adobe AIR 2.6.19140未満, Adobe Flash Player 10.2.159.1未満)

回避策：RHSA-2011:0451-1にて対応

脆弱性：システムアクセス, ポインタ参照エラー, リモートコード実行

ソース：http://www.redhat.com/

https://rhn.redhat.com/errata/RHSA-2011-0451.html

http://secunia.com/advisories/44119/

http://secunia.com/advisories/44243/

http://dvw-j.blogspot.com/2011/04/adobe-flash-player-adobe-acrobat-adobe.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0611

CVE：CVE-2011-0611

危険性：High Risk

Adobe Air, Adobe Flash Player

ソフト名：Adobe Air 1.5.3.9120～2.0.2.12610, Adobe Flash Player 7.0～10.1.53.64
回避策：APSB10-16にて対応
脆弱性：リモートコード実行, クリック乗っ取り, メモリ破壊, 特定されていない脆弱性
http://www.adobe.com/support/security/bulletins/apsb10-16.html
http://www.securityfocus.com/bid/42341
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0209
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2213
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2214
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2215
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2216
CVE：CVE-2010-0209, CVE-2010-2213, CVE-2010-2214, CVE-2010-2215, CVE-2010-2216
危険性：High Risk