CVEvulnerability
CVE-2011-2427
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-09-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.
Affected configurations
• adobe flash player (<= 10.3.183.7)
• adobe flash player 6.0.21.0
• adobe flash player 6.0.79
• adobe flash player 7.0
• adobe flash player 7.0.1
• adobe flash player 7.0.14.0
• adobe flash player 7.0.19.0
• adobe flash player 7.0.24.0
• adobe flash player 7.0.25
• adobe flash player 7.0.53.0
• adobe flash player 7.0.60.0
• adobe flash player 7.0.61.0
• adobe flash player 7.0.63
• adobe flash player 7.0.66.0
• adobe flash player 7.0.67.0
• adobe flash player 7.0.68.0
• adobe flash player 7.0.69.0
• adobe flash player 7.0.70.0
• adobe flash player 7.0.73.0
• adobe flash player 7.1
• adobe flash player 7.1.1
• adobe flash player 7.2
• adobe flash player 8.0
• adobe flash player 8.0.22.0
• adobe flash player 8.0.24.0
• adobe flash player 8.0.33.0
• adobe flash player 8.0.34.0
• adobe flash player 8.0.35.0
• adobe flash player 8.0.39.0
• adobe flash player 8.0.42.0
• adobe flash player 9.0
• adobe flash player 9.0.16
• adobe flash player 9.0.18d60
• adobe flash player 9.0.20
• adobe flash player 9.0.20.0
• adobe flash player 9.0.28
• adobe flash player 9.0.28.0
• adobe flash player 9.0.31
• adobe flash player 9.0.31.0
• adobe flash player 9.0.45.0
• adobe flash player 9.0.47.0
• adobe flash player 9.0.48.0
• adobe flash player 9.0.112.0
• adobe flash player 9.0.114.0
• adobe flash player 9.0.115.0
• adobe flash player 9.0.124.0
• adobe flash player 9.0.125.0
• adobe flash player 9.0.151.0
• adobe flash player 9.0.152.0
• adobe flash player 9.0.155.0
• adobe flash player 9.0.159.0
• adobe flash player 9.0.246.0
• adobe flash player 9.0.260.0
• adobe flash player 9.0.262.0
• adobe flash player 9.0.277.0
• adobe flash player 9.0.283.0
• adobe flash player 9.125.0
• adobe flash player 10.0.0.584
• adobe flash player 10.0.12.10
• adobe flash player 10.0.12.36
… and 36 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00025.html lists.opensuse.org
- http://secunia.com/advisories/48308 secunia.com
- http://www.adobe.com/support/security/bulletins/apsb11-26.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1333.html www.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14125 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15950 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00025.html lists.opensuse.org
- http://secunia.com/advisories/48308 secunia.com
- http://www.adobe.com/support/security/bulletins/apsb11-26.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1333.html www.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14125 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15950 oval.cisecurity.org