Buffer overflow in Adobe Air
CVE-2011-2424
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."
Vulnerability class: Buffer Overflow
EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.
Affected products
- Adobe Adobe_air — versions 1.0, 1.1, 1.5
- Adobe Flash_player — versions 6.0.21.0, 6.0.79, 7.0
- Apple Mac_os_x
- Google Android
- Linux Linux_kernel
- Microsoft Windows
- Sun Sunos
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@adobe.com (x_refsource_CONFIRM)
- psirt@adobe.com (x_refsource_MISC)
- psirt@adobe.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- psirt@adobe.com (x_refsource_MISC)
- psirt@adobe.com (signature, x_refsource_OVAL, vdb-entry)
- psirt@adobe.com (x_refsource_MISC)
- psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@adobe.com (signature, x_refsource_OVAL, vdb-entry)
- psirt@adobe.com (x_refsource_REDHAT, vendor-advisory)