CVE-2011-2457 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Adobe AIR

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources

Severity

10.0CRITICALNVD

EPSS

4.8%

top 10.55%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Adobe AIR Adobe Flash Player

Timeline

PublishedNov 11

Latest updateMay 14

Description

Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages2 packages

▶NVDadobe/flash_player10.0 — 10.3.183.11+2

▶NVDadobe/adobe_air3.0 — 3.1.0.4880

Patches

Patch: www.adobe.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

GHSA

GHSA-2p7x-52hq-2mp3: Stack-based buffer overflow in Adobe Flash Player before 10↗2022-05-14

▶

CVEList

CVE-2011-2457: Stack-based buffer overflow in Adobe Flash Player before 10↗2011-11-11

▶

📋Vendor Advisories

Red Hat

flash-plugin: mulitple code execution flaws (APSB11-28)↗2011-11-10

▶