Login Request a demo
Unscored severity · published Aug 15, 2011
CVE-2011-2424
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before…
–
CVSS
6.9%
EPSS
No
On KEV
Description
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."
Exploitation
Is it being used?
Exploit prediction (EPSS)6.9% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AA
Adobe Air · Adobe
through 2.7; 1.0; 1.1; 1.5; 1.5.2; 1.5.3; +15 more · source: NVD
FP
Flash Player · Adobe
through 10.3.181.36; 6.0.21.0; 6.0.79; 7.0; 7.0.1; 7.0.14.0; +34 more · source: NVD
Affected product
AA
Adobe Air
Adobe
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2424
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2424
blogs.adobe.com
http://blogs.adobe.com/asset/2011/08/how-did-you-get-to-that-number.html
googleonlinesecurity.blogspot.com
http://googleonlinesecurity.blogspot.com/2011/08/fuzzing-at-scale.html
twitter.com
http://twitter.com/taviso/statuses/101046246277521409
twitter.com
http://twitter.com/taviso/statuses/101046396790128640
Patch
http://www.adobe.com/support/security/bulletins/apsb11-21.html
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2011-1144.html
More from Adobe Air
8.8
CVE-2014-0502
Adobe Flash Player Double Free Vulnerablity
8.8
CVE-2011-0611
Adobe Flash Player Remote Code Execution Vulnerability
–
CVE-2015-0309
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before…
–
CVE-2015-0308
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before…
–
CVE-2015-0307
Adobe Flash Player before 13.0.0.260 and 14.x through 16.x before 16.0.0.257 on Windows and OS X and before 11.2.202.429 on Linux, Adobe AIR before 16.0.0.245 on Windows and OS X…