CVEvulnerability
CVE-2011-2424
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-08-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."
Affected configurations
• adobe flash player (<= 10.3.181.36)
• adobe flash player 6.0.21.0
• adobe flash player 6.0.79
• adobe flash player 7.0
• adobe flash player 7.0.1
• adobe flash player 7.0.14.0
• adobe flash player 7.0.19.0
• adobe flash player 7.0.24.0
• adobe flash player 7.0.25
• adobe flash player 7.0.53.0
• adobe flash player 7.0.60.0
• adobe flash player 7.0.61.0
• adobe flash player 7.0.63
• adobe flash player 7.0.66.0
• adobe flash player 7.0.67.0
• adobe flash player 7.0.68.0
• adobe flash player 7.0.69.0
• adobe flash player 7.0.70.0
• adobe flash player 7.0.73.0
• adobe flash player 7.1
• adobe flash player 7.1.1
• adobe flash player 7.2
• adobe flash player 8.0
• adobe flash player 8.0.22.0
• adobe flash player 8.0.24.0
• adobe flash player 8.0.33.0
• adobe flash player 8.0.34.0
• adobe flash player 8.0.35.0
• adobe flash player 8.0.39.0
• adobe flash player 8.0.42.0
• adobe flash player 9.0
• adobe flash player 9.0.16
• adobe flash player 9.0.18d60
• adobe flash player 9.0.20
• adobe flash player 9.0.20.0
• adobe flash player 9.0.28
• adobe flash player 9.0.28.0
• adobe flash player 9.0.31
• adobe flash player 9.0.31.0
• adobe flash player 9.0.45.0
• adobe flash player 9.0.47.0
• adobe flash player 9.0.48.0
• adobe flash player 9.0.112.0
• adobe flash player 9.0.114.0
• adobe flash player 9.0.115.0
• adobe flash player 9.0.124.0
• adobe flash player 9.0.125.0
• adobe flash player 9.0.151.0
• adobe flash player 9.0.152.0
• adobe flash player 9.0.155.0
• adobe flash player 9.0.159.0
• adobe flash player 9.0.246.0
• adobe flash player 9.0.260.0
• adobe flash player 9.0.262.0
• adobe flash player 9.0.277.0
• adobe flash player 9.0.283.0
• adobe flash player 9.125.0
• adobe flash player 10.0.0.584
• adobe flash player 10.0.12.10
• adobe flash player 10.0.12.36
… and 44 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://blogs.adobe.com/asset/2011/08/how-did-you-get-to-that-number.html blogs.adobe.com
- http://googleonlinesecurity.blogspot.com/2011/08/fuzzing-at-scale.html googleonlinesecurity.blogspot.com
- http://twitter.com/taviso/statuses/101046246277521409 twitter.com
- http://twitter.com/taviso/statuses/101046396790128640 twitter.com
- http://www.adobe.com/support/security/bulletins/apsb11-21.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1144.html www.redhat.com
- http://www.us-cert.gov/cas/techalerts/TA11-222A.html US Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14199 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15869 oval.cisecurity.org
- http://blogs.adobe.com/asset/2011/08/how-did-you-get-to-that-number.html blogs.adobe.com
- http://googleonlinesecurity.blogspot.com/2011/08/fuzzing-at-scale.html googleonlinesecurity.blogspot.com
- http://twitter.com/taviso/statuses/101046246277521409 twitter.com
- http://twitter.com/taviso/statuses/101046396790128640 twitter.com
- http://www.adobe.com/support/security/bulletins/apsb11-21.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1144.html www.redhat.com
- http://www.us-cert.gov/cas/techalerts/TA11-222A.html US Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14199 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15869 oval.cisecurity.org