CVE-2011-2429 — Adobe Flash Player vulnerability

CWE-2644 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
1.9%
top 16.66%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Flash Player
Timeline
PublishedSep 22
Latest updateMay 14

Description

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, related to a "security control bypass."

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDadobe/flash_player10.3.183.7+95

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

1
GHSA
GHSA-xrcc-hq3w-rm7j: Adobe Flash Player before 10↗2022-05-14
▶

📋Vendor Advisories

1
Red Hat
flash-plugin: security control bypass information disclosure fixed in APSB11-26↗2011-09-21
▶

💬Community

1
Bugzilla
CVE-2011-2429 acroread, flash-plugin: security control bypass information disclosure fixed in APSB11-26↗2011-09-21
▶