{"cves":[{"id":"CVE-2011-0011","published":"2011-02-11T00:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nqemu-kvm before 0.11.0 disables VNC authentication when the password is\ncleared, which allows remote attackers to bypass authentication and\nestablish VNC sessions.","ubuntu_description":"","notes":[{"author":"kees","note":"qemu in hardy and dapper were not affected"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://ubuntu.com/security/notices/USN-1063-1","https://www.cve.org/CVERecord?id=CVE-2011-0011"],"bugs":[""],"patches":{"qemu-kvm":["upstream: http://www.qemu.com/qemu.git/commit/?id=1cd20f8bf0ecb9d1d1bd5e2ffab3b88835380c9b"]},"tags":{},"packages":[{"name":"qemu-kvm","source":"https://ubuntu.com/security/cve?package=qemu-kvm","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=qemu-kvm","debian":"https://tracker.debian.org/pkg/qemu-kvm","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"0.11.0-0ubuntu6.4","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"0.12.3+noroms-0ubuntu9.4","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"0.12.5+noroms-0ubuntu7.2","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"","component":null,"pocket":"security"}]}],"notices_ids":["USN-1063-1"],"notices":[{"id":"USN-1063-1","title":"QEMU vulnerability","summary":"Blank passwords allowed unrestricted QEMU VNC session access.\n","instructions":"After a standard system update you need to restart any running QEMU sessions\nto make all the necessary changes.\n","references":[],"published":"2011-02-14T19:26:53.944495","description":"Neil Wilson discovered that if VNC passwords were blank in QEMU\nconfigurations, access to VNC sessions was allowed without a password\ninstead of being disabled. A remote attacker could connect to running\nVNC sessions of QEMU and directly control the system. By default, QEMU\ndoes not start VNC sessions.\n","is_hidden":false,"release_packages":{"lucid":[{"name":"qemu-kvm","version":"0.12.3+noroms-0ubuntu9.4","description":"Full virtualization on i386 and amd64 hardware","is_source":true},{"name":"qemu-kvm","version":"0.12.3+noroms-0ubuntu9.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.3+noroms-0ubuntu9.4"},{"name":"qemu-kvm-extras","version":"0.12.3+noroms-0ubuntu9.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.3+noroms-0ubuntu9.4"},{"name":"kvm","version":"0.12.3+noroms-0ubuntu9.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.3+noroms-0ubuntu9.4"},{"name":"qemu-arm-static","version":"0.12.3+noroms-0ubuntu9.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.3+noroms-0ubuntu9.4"},{"name":"qemu-kvm-extras-static","version":"0.12.3+noroms-0ubuntu9.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.3+noroms-0ubuntu9.4"},{"name":"qemu-common","version":"0.12.3+noroms-0ubuntu9.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.3+noroms-0ubuntu9.4"},{"name":"qemu","version":"0.12.3+noroms-0ubuntu9.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.3+noroms-0ubuntu9.4"}],"maverick":[{"name":"qemu-kvm","version":"0.12.5+noroms-0ubuntu7.2","description":"Full virtualization on i386 and amd64 hardware","is_source":true},{"name":"qemu-kvm","version":"0.12.5+noroms-0ubuntu7.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.5+noroms-0ubuntu7.2"},{"name":"qemu-kvm-extras-static","version":"0.12.5+noroms-0ubuntu7.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.5+noroms-0ubuntu7.2"},{"name":"kvm","version":"0.12.5+noroms-0ubuntu7.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.5+noroms-0ubuntu7.2"},{"name":"qemu-arm-static","version":"0.12.5+noroms-0ubuntu7.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.5+noroms-0ubuntu7.2"},{"name":"qemu-kvm-extras","version":"0.12.5+noroms-0ubuntu7.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.5+noroms-0ubuntu7.2"},{"name":"qemu","version":"0.12.5+noroms-0ubuntu7.2","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.12.5+noroms-0ubuntu7.2"}],"karmic":[{"name":"qemu-kvm","version":"0.11.0-0ubuntu6.4","description":"Full virtualization on i386 and amd64 hardware","is_source":true},{"name":"qemu-kvm","version":"0.11.0-0ubuntu6.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.11.0-0ubuntu6.4"},{"name":"qemu-arm-static","version":"0.11.0-0ubuntu6.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.11.0-0ubuntu6.4"},{"name":"kvm","version":"0.11.0-0ubuntu6.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.11.0-0ubuntu6.4"},{"name":"qemu","version":"0.11.0-0ubuntu6.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.11.0-0ubuntu6.4"},{"name":"qemu-kvm-extras","version":"0.11.0-0ubuntu6.4","is_source":false,"source_link":"https://launchpad.net/ubuntu/+source/qemu-kvm","version_link":"https://launchpad.net/ubuntu/+source/qemu-kvm/0.11.0-0ubuntu6.4"}]},"type":"USN","cves_ids":["CVE-2011-0011"]}]},{"id":"CVE-2011-0985","published":"2011-02-10T19:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nGoogle Chrome before 9.0.597.94 does not properly perform process\ntermination upon memory exhaustion, which has unspecified impact and remote\nattack vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0985"],"bugs":[""],"patches":{"chromium-browser":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.0.597.94~r73967-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.0.597.94~r73967-0ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.0.597.94","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0984","published":"2011-02-10T19:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nGoogle Chrome before 9.0.597.94 does not properly handle plug-ins, which\nallows remote attackers to cause a denial of service (out-of-bounds read)\nvia unspecified vectors.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0984"],"bugs":[""],"patches":{"chromium-browser":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.0.597.94~r73967-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.0.597.94~r73967-0ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.0.597.94","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0983","published":"2011-02-10T19:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nGoogle Chrome before 9.0.597.94 does not properly handle anonymous blocks,\nwhich allows remote attackers to cause a denial of service or possibly have\nunspecified other impact via unknown vectors that lead to a \"stale\npointer.\"","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0983"],"bugs":[""],"patches":{"chromium-browser":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.0.597.94~r73967-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.0.597.94~r73967-0ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.0.597.94","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0982","published":"2011-02-10T19:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUse-after-free vulnerability in Google Chrome before 9.0.597.94 allows\nremote attackers to cause a denial of service or possibly have unspecified\nother impact via vectors involving SVG font faces.","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0982"],"bugs":[""],"patches":{"chromium-browser":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.0.597.94~r73967-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.0.597.94~r73967-0ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.0.597.94","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0981","published":"2011-02-10T19:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nGoogle Chrome before 9.0.597.94 does not properly perform event handling\nfor animations, which allows remote attackers to cause a denial of service\nor possibly have unspecified other impact via unknown vectors that lead to\na \"stale pointer.\"","ubuntu_description":"","notes":[],"codename":null,"priority":"low","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0981"],"bugs":[""],"patches":{"chromium-browser":[]},"tags":{},"packages":[{"name":"chromium-browser","source":"https://ubuntu.com/security/cve?package=chromium-browser","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=chromium-browser","debian":"https://tracker.debian.org/pkg/chromium-browser","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"9.0.597.94~r73967-0ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"9.0.597.94~r73967-0ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"9.0.597.94","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0539","published":"2011-02-10T18:00:00","updated_at":"2026-06-06T04:51:31.149003+00:00","description":"\nThe key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when\ngenerating legacy certificates using the -t command-line option in\nssh-keygen, does not initialize the nonce field, which might allow remote\nattackers to obtain sensitive stack memory contents or make it easier to\nconduct hash collision attacks.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"only version 5.6 and 5.7"}],"codename":null,"priority":"medium","cvss3":7.5,"impact":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH"}}},"status":"active","mitigation":"","references":["http://www.openssh.com/txt/legacy-cert.adv","https://www.cve.org/CVERecord?id=CVE-2011-0539"],"bugs":[""],"patches":{"openssh":[]},"tags":{},"packages":[{"name":"openssh","source":"https://ubuntu.com/security/cve?package=openssh","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=openssh","debian":"https://tracker.debian.org/pkg/openssh","statuses":[{"release_codename":"dapper","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"1:5.5p1-4ubuntu5","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"5.8p1","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0283","published":"2011-02-10T18:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nThe Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.9 allows\nremote attackers to cause a denial of service (NULL pointer dereference and\ndaemon crash) via a malformed request packet that does not trigger a\nresponse packet.","ubuntu_description":"","notes":[{"author":"jdstrand","note":"1.9 only (confirmed by sbeattie)"}],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0283"],"bugs":[""],"patches":{"krb5":[]},"tags":{},"packages":[{"name":"krb5","source":"https://ubuntu.com/security/cve?package=krb5","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=krb5","debian":"https://tracker.debian.org/pkg/krb5","statuses":[{"release_codename":"dapper","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"karmic","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"lucid","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"maverick","status":"not-affected","description":"","component":null,"pocket":"security"},{"release_codename":"upstream","status":"needs-triage","description":"","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0608","published":"2011-02-10T16:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary\ncode or cause a denial of service (memory corruption) via unspecified\nvectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560,\nCVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574,\nCVE-2011-0578, and CVE-2011-0607.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0608"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27-0hardy1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27-0karmic1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27-0maverick1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27ubuntu0.8.04.2","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27ubuntu0.9.10.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0607","published":"2011-02-10T16:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary\ncode or cause a denial of service (memory corruption) via unspecified\nvectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560,\nCVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574,\nCVE-2011-0578, and CVE-2011-0608.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0607"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27-0hardy1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27-0karmic1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27-0maverick1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27ubuntu0.8.04.2","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27ubuntu0.9.10.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0578","published":"2011-02-10T16:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary\ncode or cause a denial of service (memory corruption) via unspecified\nvectors related to a constructor for an unspecified ActionScript3 object\nand improper type checking, a different vulnerability than CVE-2011-0559,\nCVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573,\nCVE-2011-0574, CVE-2011-0607, and CVE-2011-0608.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0578"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27-0hardy1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27-0karmic1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27-0maverick1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27ubuntu0.8.04.2","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27ubuntu0.9.10.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0577","published":"2011-02-10T16:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUnspecified vulnerability in Adobe Flash Player before 10.2.152.26 allows\nremote attackers to execute arbitrary code via a crafted font.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0577"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27-0hardy1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27-0karmic1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27-0maverick1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27ubuntu0.8.04.2","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27ubuntu0.9.10.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0575","published":"2011-02-10T16:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nUntrusted search path vulnerability in Adobe Flash Player before\n10.2.152.26 allows local users to gain privileges via a Trojan horse DLL in\nthe current working directory.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0575"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27-0hardy1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27-0karmic1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27-0maverick1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27ubuntu0.8.04.2","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27ubuntu0.9.10.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0574","published":"2011-02-10T16:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary\ncode or cause a denial of service (memory corruption) via unspecified\nvectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560,\nCVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0578,\nCVE-2011-0607, and CVE-2011-0608.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0574"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27-0hardy1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27-0karmic1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27-0maverick1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27ubuntu0.8.04.2","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27ubuntu0.9.10.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0573","published":"2011-02-10T16:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary\ncode or cause a denial of service (memory corruption) via unspecified\nvectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560,\nCVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0574, CVE-2011-0578,\nCVE-2011-0607, and CVE-2011-0608.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0573"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27-0hardy1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27-0karmic1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27-0maverick1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27ubuntu0.8.04.2","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27ubuntu0.9.10.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0572","published":"2011-02-10T16:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary\ncode or cause a denial of service (memory corruption) via unspecified\nvectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560,\nCVE-2011-0561, CVE-2011-0571, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578,\nCVE-2011-0607, and CVE-2011-0608.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0572"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27-0hardy1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27-0karmic1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27-0maverick1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27ubuntu0.8.04.2","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27ubuntu0.9.10.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0571","published":"2011-02-10T16:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary\ncode or cause a denial of service (memory corruption) via unspecified\nvectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560,\nCVE-2011-0561, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578,\nCVE-2011-0607, and CVE-2011-0608.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0571"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27-0hardy1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27-0karmic1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27-0maverick1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27ubuntu0.8.04.2","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27ubuntu0.9.10.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0561","published":"2011-02-10T16:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary\ncode or cause a denial of service (memory corruption) via unspecified\nvectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560,\nCVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578,\nCVE-2011-0607, and CVE-2011-0608.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0561"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27-0hardy1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27-0karmic1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27-0maverick1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27ubuntu0.8.04.2","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27ubuntu0.9.10.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0560","published":"2011-02-10T16:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary\ncode or cause a denial of service (memory corruption) via unspecified\nvectors, a different vulnerability than CVE-2011-0559, CVE-2011-0561,\nCVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578,\nCVE-2011-0607, and CVE-2011-0608.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0560"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27-0hardy1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27-0karmic1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27-0maverick1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27ubuntu0.8.04.2","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27ubuntu0.9.10.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]},{"id":"CVE-2011-0559","published":"2011-02-10T16:00:00","updated_at":"2024-07-24T15:57:39.284958+00:00","description":"\nAdobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary\ncode or cause a denial of service (memory corruption) via crafted\nparameters to an unspecified ActionScript method that cause a parameter to\nbe used as an object pointer, a different vulnerability than CVE-2011-0560,\nCVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574,\nCVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.","ubuntu_description":"","notes":[],"codename":null,"priority":"medium","cvss3":null,"impact":null,"status":"active","mitigation":"","references":["https://www.cve.org/CVERecord?id=CVE-2011-0559"],"bugs":[""],"patches":{"flashplugin-nonfree":[],"adobe-flashplugin":[]},"tags":{},"packages":[{"name":"adobe-flashplugin","source":"https://ubuntu.com/security/cve?package=adobe-flashplugin","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=adobe-flashplugin","debian":"https://tracker.debian.org/pkg/adobe-flashplugin","statuses":[{"release_codename":"dapper","status":"DNE","description":"","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27-0hardy1","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27-0karmic1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27-0lucid1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27-0maverick1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]},{"name":"flashplugin-nonfree","source":"https://ubuntu.com/security/cve?package=flashplugin-nonfree","ubuntu":"https://packages.ubuntu.com/search?suite=all&section=all&arch=any&searchon=sourcenames&keywords=flashplugin-nonfree","debian":"https://tracker.debian.org/pkg/flashplugin-nonfree","statuses":[{"release_codename":"dapper","status":"ignored","description":"end of life","component":null,"pocket":"security"},{"release_codename":"hardy","status":"released","description":"10.2.152.27ubuntu0.8.04.2","component":null,"pocket":"security"},{"release_codename":"karmic","status":"released","description":"10.2.152.27ubuntu0.9.10.1","component":null,"pocket":"security"},{"release_codename":"lucid","status":"released","description":"10.2.152.27ubuntu0.10.04.1","component":null,"pocket":"security"},{"release_codename":"maverick","status":"released","description":"10.2.152.27ubuntu0.10.10.1","component":null,"pocket":"security"},{"release_codename":"upstream","status":"released","description":"10.2.152.27","component":null,"pocket":"security"}]}],"notices_ids":[],"notices":[]}],"offset":71680,"limit":20,"total_results":79316}