CVE-2011-0607 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe Flash Player

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer32 documents5 sources
Severity
9.3CRITICALNVD
EPSS
2.5%
top 14.63%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Flash Player
Timeline
PublishedFeb 10
Latest updateMay 14

Description

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0559, CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, and CVE-2011-0608.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDadobe/flash_player10.2.152+74

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

11
GHSA
GHSA-9f23-98x6-49jh: Adobe Flash Player before 10↗2022-05-14
▶
GHSA
GHSA-mmx2-27hf-3f9r: Adobe Flash Player before 10↗2022-05-14
▶
GHSA
GHSA-m245-xcm9-7cpw: Adobe Flash Player before 10↗2022-05-14
▶
GHSA
GHSA-3mfv-6679-5j8f: Adobe Flash Player before 10↗2022-05-14
▶
GHSA
GHSA-r85g-282v-289c: Adobe Flash Player before 10↗2022-05-14
▶

📋Vendor Advisories

10
Red Hat
flash-plugin: multiple code execution flaws (APSB11-02)↗2011-02-08
▶
Red Hat
flash-plugin: multiple code execution flaws (APSB11-02)↗2011-02-08
▶
Red Hat
flash-plugin: multiple code execution flaws (APSB11-02)↗2011-02-08
▶
Red Hat
flash-plugin: multiple code execution flaws (APSB11-02)↗2011-02-08
▶
Red Hat
flash-plugin: multiple code execution flaws (APSB11-02)↗2011-02-08
▶

💬Community

1
Bugzilla
CVE-2011-0558 CVE-2011-0559 CVE-2011-0560 CVE-2011-0561 CVE-2011-0571 CVE-2011-0572 CVE-2011-0573 CVE-2011-0574 CVE-2011-0575 CVE-2011-0577 CVE-2011-0578 CVE-2011-0607 CVE-2011-0608 flash-plugin: mult↗2011-02-09
▶