Red Hat Bugzilla – Bug 761216
CVE-2011-4693 flash-plugin: arbitrary code execution via unspecified vulnerability
Last modified: 2012-05-30 11:15:29 EDT
Common Vulnerabilities and Exposures assigned an identifier CVE-2011-4693 to the following vulnerability: Name: CVE-2011-4693 URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4693 Assigned: 20111207 Reference: https://lists.immunityinc.com/pipermail/dailydave/2011-December/000402.html Reference: http://partners.immunityinc.com/movies/VulnDisco-Flash0day-v2.mov Unspecified vulnerability in Adobe Flash Player 11.1.102.55 on Windows and Mac OS X allows remote attackers to execute arbitrary code via a crafted SWF file, as demonstrated by the first of two vulnerabilities exploited by the Intevydis vd_adobe_fp module in VulnDisco Step Ahead (SA). NOTE: as of 20111207, this disclosure has no actionable information. However, because the module author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. NOTE: it is unclear whether or not Linux is also affected by this flaw.
Statement: We do not currently plan to fix this issue due to the lack of further information about the flaw and its impact. If more information becomes available at a future date, we may revisit the issue.