CVE-2011-2425
published 2011-08-10CVE-2011-2425: Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac…
PriorityP345critical10CVSS 2.0
AVNACLAuNCCICAC
EPSS
7.74%
94.0th percentile
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.
Affected
102 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | adobe_air | <= 2.7 | — |
| adobe | adobe_air | — | — |
| adobe | adobe_air | — | — |
| adobe | adobe_air | — | — |
| adobe | adobe_air | — | — |
| adobe | adobe_air | — | — |
| adobe | adobe_air | — | — |
| adobe | adobe_air | — | — |
| adobe | adobe_air | — | — |
| adobe | adobe_air | — | — |
| adobe | flash_player | <= 10.3.181.36 | — |
| adobe | flash_player | <= 10.3.185.25 | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
CVSS provenance
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vulncheck10.0CRITICAL
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
vendor_redhat·2011-08-09·CVSS 10.0
CVE-2011-2417 [CRITICAL] flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
Red Hat
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
vendor_redhat·2011-08-09·CVSS 10.0
CVE-2011-2425 [CRITICAL] flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.
Red Hat
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
vendor_redhat·2011-08-09·CVSS 10.0
CVE-2011-2135 [CRITICAL] flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2140, CVE-2011-2417, and CVE-2011-2425.
Red Hat
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
vendor_redhat·2011-08-09·CVSS 10.0
CVE-2011-2140 [CRITICAL] flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
flash-plugin: multiple arbitrary code execution flaws (APSB-11-21)
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.
GHSA
GHSA-wrxq-xp77-xv2c: Adobe Flash Player before 10
ghsa_unreviewed·2022-05-14·CVSS 10.0
CVE-2011-2135 [CRITICAL] CWE-119 GHSA-wrxq-xp77-xv2c: Adobe Flash Player before 10
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2140, CVE-2011-2417, and CVE-2011-2425.
GHSA
GHSA-5r2p-gx4c-fqr4: Adobe Flash Player before 10
ghsa_unreviewed·2022-05-14·CVSS 10.0
CVE-2011-2425 [CRITICAL] CWE-119 GHSA-5r2p-gx4c-fqr4: Adobe Flash Player before 10
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.
GHSA
GHSA-gwmg-8j97-jg68: Adobe Flash Player before 10
ghsa_unreviewed·2022-05-14·CVSS 10.0
CVE-2011-2140 [CRITICAL] CWE-119 GHSA-gwmg-8j97-jg68: Adobe Flash Player before 10
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.
GHSA
GHSA-v7m5-7qjq-2hm5: Adobe Flash Player before 10
ghsa_unreviewed·2022-05-14·CVSS 10.0
CVE-2011-2417 [CRITICAL] CWE-119 GHSA-v7m5-7qjq-2hm5: Adobe Flash Player before 10
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
VulnCheck
Adobe Flash Player Improper Restriction of Operations within the Bounds of a Memory Buffer
vulncheck·2011·CVSS 10.0
CVE-2011-2140 [CRITICAL] Adobe Flash Player Improper Restriction of Operations within the Bounds of a Memory Buffer
Adobe Flash Player Improper Restriction of Operations within the Bounds of a Memory Buffer
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.
Affected: Adobe Flash Player
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://packetstormsecurity.com/files/109640/Adobe-Flash-Player-MP4-SequenceParameterSetNALUnit-Buffe
No detection rules found.
Exploit-DB
UPC Ireland Cisco EPC 2425 Router / Horizon Box - WPA-PSK Handshake Information
exploitdb·2013-12-16
CVE-2013-7136 UPC Ireland Cisco EPC 2425 Router / Horizon Box - WPA-PSK Handshake Information
UPC Ireland Cisco EPC 2425 Router / Horizon Box - WPA-PSK Handshake Information
---
# Exploit Title: UPC Ireland Cisco EPC 2425 Router / Horizon Box
# Google Dork:
# Date: 11/12/2013
# Author: Matt O'Connor / Planit Computing
# Advisory Link: http://www.planitcomputing.ie/upc-wifi-attack.pdf
# Version:
# Category: Remote
# Tested on: Cisco EPC 2425 / Horizon Box
The Cisco EPC 2425 routers supplied by UPC are vulnerable to an offline dictionary attack if the WPA-PSK handshake is obtained by an attacker.
The WPA-PSK pass phrase has the following features:
Random
A to Z Uppercase only
8 characters long
208,827,064,576 possible combinations ( AAAAAAAA ZZZZZZZZ ) 26^8
We notified UPC about the problem in November 2011 yet UPC are still supplying customers with newer modems / hor
Exploit-DB
eSignal and eSignal Pro 10.6.2425.1208 - File Parsing Buffer Overflow in QUO (Metasploit)
exploitdb·2011-09-20
CVE-2011-3494 eSignal and eSignal Pro 10.6.2425.1208 - File Parsing Buffer Overflow in QUO (Metasploit)
eSignal and eSignal Pro 10.6.2425.1208 - File Parsing Buffer Overflow in QUO (Metasploit)
---
##
# $Id: esignal_styletemplate_bof.rb 13765 2011-09-20 17:39:53Z sinn3r $
##
##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##
require 'msf/core'
class Metasploit3 'eSignal and eSignal Pro %q{
The software is unable to handle the "" files (even
those original included in the program) like those with the registered
extensions QUO, SUM and POR. Successful exploitation of this vulnerability
may take up to several seconds due to the use of egghunter. Also, DEP
bypass is unlikely due to the lim
Exploit-DB
eSignal and eSignal Pro 10.6.2425.1208 - Multiple Vulnerabilities
exploitdb·2011-09-14
CVE-2011-3494 eSignal and eSignal Pro 10.6.2425.1208 - Multiple Vulnerabilities
eSignal and eSignal Pro 10.6.2425.1208 - Multiple Vulnerabilities
---
#######################################################################
Luigi Auriemma
Application: eSignal and eSignal Pro
http://www.esignal.com/esignal/default.aspx
Versions: " files (even
those original included in the program) like those with the registered
extensions QUO, SUM and POR:
eax=00000001 ebx=00000000 ecx=61616161 edx=02830000 esi=0012f020 edi=03ed97f0
eip=61616161 esp=0012efb8 ebp=0012f088 iopl=0 nv up ei pl nz ac po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00010212
61616161 ?? ???
B] heap overflow
Heap overflow during the handling of the Font->FaceName field of the
various files that use it like ETS, ETQ, ESK and so on:
eax=04255aa8 ebx=0012f004 ecx=04255ab4 edx=61616160 esi=0012f0
http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.htmlhttp://secunia.com/advisories/48308http://www.adobe.com/support/security/bulletins/apsb11-21.htmlhttp://www.redhat.com/support/errata/RHSA-2011-1144.htmlhttp://www.securityfocus.com/bid/49085http://www.us-cert.gov/cas/techalerts/TA11-222A.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14073https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15475http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.htmlhttp://secunia.com/advisories/48308http://www.adobe.com/support/security/bulletins/apsb11-21.htmlhttp://www.redhat.com/support/errata/RHSA-2011-1144.htmlhttp://www.securityfocus.com/bid/49085http://www.us-cert.gov/cas/techalerts/TA11-222A.htmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14073https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15475
2011-08-10
Published