{ "document": { "aggregate_severity": { "namespace": "https://www.suse.com/support/security/rating/", "text": "important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright 2024 SUSE LLC. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "SUSE CVE-2011-0627", "title": "Title" }, { "category": "description", "text": "Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file.", "title": "Description of the CVE" }, { "category": "legal_disclaimer", "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).", "title": "Terms of use" } ], "publisher": { "category": "vendor", "contact_details": "https://www.suse.com/support/security/contact/", "name": "SUSE Product Security Team", "namespace": "https://www.suse.com/" }, "references": [ { "category": "external", "summary": "CVE-2011-0627", "url": "https://www.suse.com/security/cve/CVE-2011-0627" }, { "category": "external", "summary": "SUSE Security Ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "external", "summary": "SUSE Bug 693573 for CVE-2011-0627", "url": "https://bugzilla.suse.com/693573" }, { "category": "external", "summary": "Advisory link for SUSE-SA:2011:025", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F7VUZRXKKFC323MBPANZAQ2RWFMBRD4J/#F7VUZRXKKFC323MBPANZAQ2RWFMBRD4J" } ], "title": "SUSE CVE CVE-2011-0627", "tracking": { "current_release_date": "2026-06-25T03:23:44Z", "generator": { "date": "2023-02-15T05:54:33Z", "engine": { "name": "cve-database.git:bin/generate-csaf-vex.pl", "version": "1" } }, "id": "CVE-2011-0627", "initial_release_date": "2023-02-15T05:54:33Z", "revision_history": [ { "date": "2023-02-15T05:54:33Z", "number": "2", "summary": "Current version" }, { "date": "2023-12-08T05:06:58Z", "number": "3", "summary": "Current version" }, { "date": "2023-12-09T03:31:15Z", "number": "4", "summary": "Current version" }, { "date": "2024-10-09T06:21:56Z", "number": "5", "summary": "Current version" }, { "date": "2025-03-14T07:52:30Z", "number": "6", "summary": "Current version" }, { "date": "2025-03-16T14:24:45Z", "number": "7", "summary": "Current version" }, { "date": "2025-04-25T13:55:22Z", "number": "8", "summary": "Current version" }, { "date": "2025-10-08T01:19:33Z", "number": "9", "summary": "Current version" }, { "date": "2026-06-25T03:23:44Z", "number": "10", "summary": "severity changed from critical to important" } ], "status": "interim", "version": "10" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "SUSE Linux Enterprise Desktop 11 SP1", "product": { "name": "SUSE Linux Enterprise Desktop 11 SP1", "product_id": "SUSE Linux Enterprise Desktop 11 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:suse_sled:11:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Desktop 12", "product": { "name": "SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12", "product_identification_helper": { "cpe": "cpe:/o:suse:sled:12" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Desktop 12 SP1", "product": { "name": "SUSE Linux Enterprise Desktop 12 SP1", "product_id": "SUSE Linux Enterprise Desktop 12 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sled:12:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12", "product": { "name": "SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server 12 SP1", "product": { "name": "SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sles:12:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product": { "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sles_sap:12:sp1" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Workstation Extension 12", "product": { "name": "SUSE Linux Enterprise Workstation Extension 12", "product_id": "SUSE Linux Enterprise Workstation Extension 12", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-we:12" } } }, { "category": "product_name", "name": "SUSE Linux Enterprise Workstation Extension 12 SP1", "product": { "name": "SUSE Linux Enterprise Workstation Extension 12 SP1", "product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1", "product_identification_helper": { "cpe": "cpe:/o:suse:sle-we:12:sp1" } } }, { "category": "product_version", "name": "flash-player", "product": { "name": "flash-player", "product_id": "flash-player", "product_identification_helper": { "cpe": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/flash-player@?upstream=flash-player.src.rpm" } } }, { "category": "product_version", "name": "flash-player-11.2.202.406-1.3", "product": { "name": "flash-player-11.2.202.406-1.3", "product_id": "flash-player-11.2.202.406-1.3", "product_identification_helper": { "cpe": "cpe:2.3:a:adobe:flash_player:11.2.202.406:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/flash-player@11.2.202.406-1.3?upstream=flash-player-11.2.202.406-1.3.src.rpm" } } }, { "category": "product_version", "name": "flash-player-11.2.202.548-111.1", "product": { "name": "flash-player-11.2.202.548-111.1", "product_id": "flash-player-11.2.202.548-111.1", "product_identification_helper": { "cpe": "cpe:2.3:a:adobe:flash_player:11.2.202.548:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/flash-player@11.2.202.548-111.1?upstream=flash-player-11.2.202.548-111.1.src.rpm" } } }, { "category": "product_version", "name": "flash-player-gnome-11.2.202.406-1.3", "product": { "name": "flash-player-gnome-11.2.202.406-1.3", "product_id": "flash-player-gnome-11.2.202.406-1.3", "product_identification_helper": { "cpe": "cpe:2.3:a:adobe:flash_player:11.2.202.406:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/flash-player-gnome@11.2.202.406-1.3?upstream=flash-player-11.2.202.406-1.3.src.rpm" } } }, { "category": "product_version", "name": "flash-player-gnome-11.2.202.548-111.1", "product": { "name": "flash-player-gnome-11.2.202.548-111.1", "product_id": "flash-player-gnome-11.2.202.548-111.1", "product_identification_helper": { "cpe": "cpe:2.3:a:adobe:flash_player:11.2.202.548:*:*:*:*:*:*:*", "purl": "pkg:rpm/suse/flash-player-gnome@11.2.202.548-111.1?upstream=flash-player-11.2.202.548-111.1.src.rpm" } } } ], "category": "product_family", "name": "SUSE Linux Enterprise" } ], "category": "vendor", "name": "SUSE" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "flash-player-11.2.202.406-1.3 as component of SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.406-1.3" }, "product_reference": "flash-player-11.2.202.406-1.3", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-gnome-11.2.202.406-1.3 as component of SUSE Linux Enterprise Desktop 12", "product_id": "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.406-1.3" }, "product_reference": "flash-player-gnome-11.2.202.406-1.3", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-11.2.202.548-111.1 as component of SUSE Linux Enterprise Desktop 12 SP1", "product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.548-111.1" }, "product_reference": "flash-player-11.2.202.548-111.1", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-gnome-11.2.202.548-111.1 as component of SUSE Linux Enterprise Desktop 12 SP1", "product_id": "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.548-111.1" }, "product_reference": "flash-player-gnome-11.2.202.548-111.1", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-11.2.202.406-1.3 as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:flash-player-11.2.202.406-1.3" }, "product_reference": "flash-player-11.2.202.406-1.3", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-gnome-11.2.202.406-1.3 as component of SUSE Linux Enterprise Server 12", "product_id": "SUSE Linux Enterprise Server 12:flash-player-gnome-11.2.202.406-1.3" }, "product_reference": "flash-player-gnome-11.2.202.406-1.3", "relates_to_product_reference": "SUSE Linux Enterprise Server 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-11.2.202.406-1.3 as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:flash-player-11.2.202.406-1.3" }, "product_reference": "flash-player-11.2.202.406-1.3", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-gnome-11.2.202.406-1.3 as component of SUSE Linux Enterprise Server for SAP Applications 12", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12:flash-player-gnome-11.2.202.406-1.3" }, "product_reference": "flash-player-gnome-11.2.202.406-1.3", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-11.2.202.406-1.3 as component of SUSE Linux Enterprise Workstation Extension 12", "product_id": "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.406-1.3" }, "product_reference": "flash-player-11.2.202.406-1.3", "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-gnome-11.2.202.406-1.3 as component of SUSE Linux Enterprise Workstation Extension 12", "product_id": "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.406-1.3" }, "product_reference": "flash-player-gnome-11.2.202.406-1.3", "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-11.2.202.548-111.1 as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:flash-player-11.2.202.548-111.1" }, "product_reference": "flash-player-11.2.202.548-111.1", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-gnome-11.2.202.548-111.1 as component of SUSE Linux Enterprise Server 12 SP1", "product_id": "SUSE Linux Enterprise Server 12 SP1:flash-player-gnome-11.2.202.548-111.1" }, "product_reference": "flash-player-gnome-11.2.202.548-111.1", "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-11.2.202.548-111.1 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:flash-player-11.2.202.548-111.1" }, "product_reference": "flash-player-11.2.202.548-111.1", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-gnome-11.2.202.548-111.1 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1", "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:flash-player-gnome-11.2.202.548-111.1" }, "product_reference": "flash-player-gnome-11.2.202.548-111.1", "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-11.2.202.548-111.1 as component of SUSE Linux Enterprise Workstation Extension 12 SP1", "product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.548-111.1" }, "product_reference": "flash-player-11.2.202.548-111.1", "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player-gnome-11.2.202.548-111.1 as component of SUSE Linux Enterprise Workstation Extension 12 SP1", "product_id": "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.548-111.1" }, "product_reference": "flash-player-gnome-11.2.202.548-111.1", "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 12 SP1" }, { "category": "default_component_of", "full_product_name": { "name": "flash-player as component of SUSE Linux Enterprise Desktop 11 SP1", "product_id": "SUSE Linux Enterprise Desktop 11 SP1:flash-player" }, "product_reference": "flash-player", "relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP1" } ] }, "vulnerabilities": [ { "cve": "CVE-2011-0627", "ids": [ { "system_name": "SUSE CVE Page", "text": "https://www.suse.com/security/cve/CVE-2011-0627" } ], "notes": [ { "category": "general", "text": "Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file.", "title": "CVE description" } ], "product_status": { "known_affected": [ "SUSE Linux Enterprise Desktop 11 SP1:flash-player" ], "recommended": [ "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.548-111.1", "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.548-111.1", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.406-1.3", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.406-1.3", "SUSE Linux Enterprise Server 12 SP1:flash-player-11.2.202.548-111.1", "SUSE Linux Enterprise Server 12 SP1:flash-player-gnome-11.2.202.548-111.1", "SUSE Linux Enterprise Server 12:flash-player-11.2.202.406-1.3", "SUSE Linux Enterprise Server 12:flash-player-gnome-11.2.202.406-1.3", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:flash-player-11.2.202.548-111.1", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:flash-player-gnome-11.2.202.548-111.1", "SUSE Linux Enterprise Server for SAP Applications 12:flash-player-11.2.202.406-1.3", "SUSE Linux Enterprise Server for SAP Applications 12:flash-player-gnome-11.2.202.406-1.3", "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.548-111.1", "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.548-111.1", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.406-1.3", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.406-1.3" ] }, "references": [ { "category": "external", "summary": "CVE-2011-0627", "url": "https://www.suse.com/security/cve/CVE-2011-0627" }, { "category": "external", "summary": "SUSE Security Ratings", "url": "https://www.suse.com/support/security/rating/" }, { "category": "external", "summary": "SUSE Bug 693573 for CVE-2011-0627", "url": "https://bugzilla.suse.com/693573" }, { "category": "external", "summary": "Advisory link for SUSE-SA:2011:025", "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F7VUZRXKKFC323MBPANZAQ2RWFMBRD4J/#F7VUZRXKKFC323MBPANZAQ2RWFMBRD4J" } ], "remediations": [ { "category": "vendor_fix", "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n", "product_ids": [ "SUSE Linux Enterprise Desktop 12 SP1:flash-player-11.2.202.548-111.1", "SUSE Linux Enterprise Desktop 12 SP1:flash-player-gnome-11.2.202.548-111.1", "SUSE Linux Enterprise Desktop 12:flash-player-11.2.202.406-1.3", "SUSE Linux Enterprise Desktop 12:flash-player-gnome-11.2.202.406-1.3", "SUSE Linux Enterprise Server 12 SP1:flash-player-11.2.202.548-111.1", "SUSE Linux Enterprise Server 12 SP1:flash-player-gnome-11.2.202.548-111.1", "SUSE Linux Enterprise Server 12:flash-player-11.2.202.406-1.3", "SUSE Linux Enterprise Server 12:flash-player-gnome-11.2.202.406-1.3", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:flash-player-11.2.202.548-111.1", "SUSE Linux Enterprise Server for SAP Applications 12 SP1:flash-player-gnome-11.2.202.548-111.1", "SUSE Linux Enterprise Server for SAP Applications 12:flash-player-11.2.202.406-1.3", "SUSE Linux Enterprise Server for SAP Applications 12:flash-player-gnome-11.2.202.406-1.3", "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-11.2.202.548-111.1", "SUSE Linux Enterprise Workstation Extension 12 SP1:flash-player-gnome-11.2.202.548-111.1", "SUSE Linux Enterprise Workstation Extension 12:flash-player-11.2.202.406-1.3", "SUSE Linux Enterprise Workstation Extension 12:flash-player-gnome-11.2.202.406-1.3" ] } ], "threats": [ { "category": "impact", "date": "2013-06-28T02:25:44Z", "details": "important" } ], "title": "CVE-2011-0627" } ] }