CVE-2011-0558 — Adobe Flash Player vulnerability

CWE-1894 documents4 sources
Severity
9.3CRITICALNVD
EPSS
2.3%
top 15.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Flash Player
Timeline
PublishedFeb 10
Latest updateMay 14

Description

Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDadobe/flash_player10.2.152+74

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-2rp8-9wwh-qcx6: Integer overflow in Adobe Flash Player before 10↗2022-05-14
▶

📋Vendor Advisories

1
Red Hat
flash-plugin: multiple code execution flaws (APSB11-02)↗2011-02-08
▶

💬Community

1
Bugzilla
CVE-2011-0558 CVE-2011-0559 CVE-2011-0560 CVE-2011-0561 CVE-2011-0571 CVE-2011-0572 CVE-2011-0573 CVE-2011-0574 CVE-2011-0575 CVE-2011-0577 CVE-2011-0578 CVE-2011-0607 CVE-2011-0608 flash-plugin: mult↗2011-02-09
▶