Adobe Ürünleri Birden Fazla Açıklık - Ulusal Bilgi Güvenliği Kapısı

Kaynak:	SecurityFocus

Seviye:	Yüksek
Bildiri Sürümü:	1.0
Açıklanma Zamanı:	14.06.2011
Yenilenme Zamanı:	-
Etkilenen Sistemler:	ColdFusion 9.0.1 ve öncesi, Adobe Flash Player 10.3.181.23 ve öncesi, Adobe Shockwave Player 11.5.9.620 ve öncesi, Adobe Reader X (10.0.1) ve öncesi, Adobe Acrobat X (10.0.3) ve öncesi

CVE:	-
BID:	48240, 48242, 48243, 48244, 48245, 48246, 48247, 48248, 48249, 48251, 48252, 48253, 48255, 48267, 48268, 48269, 48271, 48273, 48275, 48278, 48279, 48284, 48286, 48287, 48288, 48289, 48290, 48291, 48292, 48294, 48296, 48297, 48298, 48299, 48300, 48302, 48304, 48306, 48307, 48308, 48309, 48310, 48311
Referanslar:	Üretici Firma Web Sitesi http://www.adobe.com -2 Adobe Güvenlik Güncellemeleri -3 http://www.adobe.com/support/security/bulletins/apsb11-14.html http://www.adobe.com/support/security/bulletins/apsb11-16.html http://www.adobe.com/support/security/bulletins/apsb11-17.html http://www.adobe.com/support/security/bulletins/apsb11-18.html -8 Zero Day Initiative -9 http://www.zerodayinitiative.com/advisories/ZDI-11-200 http://www.zerodayinitiative.com/advisories/ZDI-11-201 http://www.zerodayinitiative.com/advisories/ZDI-11-202 http://www.zerodayinitiative.com/advisories/ZDI-11-203 http://www.zerodayinitiative.com/advisories/ZDI-11-204 http://www.zerodayinitiative.com/advisories/ZDI-11-205 http://www.zerodayinitiative.com/advisories/ZDI-11-206 http://www.zerodayinitiative.com/advisories/ZDI-11-207 http://www.zerodayinitiative.com/advisories/ZDI-11-208 http://www.zerodayinitiative.com/advisories/ZDI-11-209 http://www.zerodayinitiative.com/advisories/ZDI-11-210 http://www.zerodayinitiative.com/advisories/ZDI-11-211 http://www.zerodayinitiative.com/advisories/ZDI-11-212 http://www.zerodayinitiative.com/advisories/ZDI-11-213 http://www.zerodayinitiative.com/advisories/ZDI-11-214 http://www.zerodayinitiative.com/advisories/ZDI-11-215 http://www.zerodayinitiative.com/advisories/ZDI-11-216 http://www.zerodayinitiative.com/advisories/ZDI-11-217 http://www.zerodayinitiative.com/advisories/ZDI-11-218 http://www.zerodayinitiative.com/advisories/ZDI-11-219 http://www.zerodayinitiative.com/advisories/ZDI-11-220 http://www.zerodayinitiative.com/advisories/ZDI-11-221 http://www.zerodayinitiative.com/advisories/ZDI-11-222 -33 SecurityFocus BugTraq IDs -34 http://www.securityfocus.com/bid/48240 http://www.securityfocus.com/bid/48242 http://www.securityfocus.com/bid/48243 http://www.securityfocus.com/bid/48244 http://www.securityfocus.com/bid/48245 http://www.securityfocus.com/bid/48246 http://www.securityfocus.com/bid/48247 http://www.securityfocus.com/bid/48248 http://www.securityfocus.com/bid/48249 http://www.securityfocus.com/bid/48251 http://www.securityfocus.com/bid/48252 http://www.securityfocus.com/bid/48253 http://www.securityfocus.com/bid/48255 http://www.securityfocus.com/bid/48267 http://www.securityfocus.com/bid/48268 http://www.securityfocus.com/bid/48269 http://www.securityfocus.com/bid/48271 http://www.securityfocus.com/bid/48273 http://www.securityfocus.com/bid/48275 http://www.securityfocus.com/bid/48278 http://www.securityfocus.com/bid/48279 http://www.securityfocus.com/bid/48284 http://www.securityfocus.com/bid/48286 http://www.securityfocus.com/bid/48287 http://www.securityfocus.com/bid/48288 http://www.securityfocus.com/bid/48289 http://www.securityfocus.com/bid/48290 http://www.securityfocus.com/bid/48291 http://www.securityfocus.com/bid/48292 http://www.securityfocus.com/bid/48294 http://www.securityfocus.com/bid/48296 http://www.securityfocus.com/bid/48297 http://www.securityfocus.com/bid/48298 http://www.securityfocus.com/bid/48299 http://www.securityfocus.com/bid/48300 http://www.securityfocus.com/bid/48302 http://www.securityfocus.com/bid/48304 http://www.securityfocus.com/bid/48306 http://www.securityfocus.com/bid/48307 http://www.securityfocus.com/bid/48308 http://www.securityfocus.com/bid/48309 http://www.securityfocus.com/bid/48310 http://www.securityfocus.com/bid/48311
Yazar(lar):	-

Açıklama:	Adobe, birden fazla ürününü etkileyen güvenik açıklıkları için yamalar yayınlamıştır. Flash Player ürününde tam açıklanmayan bir bellek bozulması açıklığı mevcuttur. Bu konu 0-day açıklığı olarak rapor edilmiştir. Shockwave Player açıklıkları zararlı Adobe dizin dosyalarının işlenmesi sırasında oluşan hatalardan kaynaklanmaktadır. Reader açıklıkları saldırgan tarafından sunulan uzunluklara güvenenilmesinden kaynaklanmaktadır. Kullanıcının zararlı bir dosyayı açmaya ikna edilmesiyle bu açıklıklar sömürülebilmekte ve tarayıcı veya programı çalıştıran kullanıcı haklarıyla isteğe bağlı kod çalıştırılabilmektedir.
Etki:	İsteğe bağlı kod çalıştırma
Çözüm:	Güncellemeler mevcuttur.

[ Geri ]

Görüşleriniz