Improper input validation in Adobe Flash Player
CVE-2011-2428
Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service (browser crash) via unspecified vectors, related to a "logic error issue."
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.053 (91.7th percentile) — read the EPSS interpretation.
Affected products
- Adobe Flash_player — versions 6.0.21.0, 6.0.79, 7.0
- Apple Mac_os_x
- Google Android
- Linux Linux_kernel
- Microsoft Windows
- Sun Sunos
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@adobe.com (signature, x_refsource_OVAL, vdb-entry)
- psirt@adobe.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@adobe.com (vendor-advisory, x_refsource_SUSE)
- psirt@adobe.com (signature, x_refsource_OVAL, vdb-entry)
- psirt@adobe.com (x_refsource_REDHAT, vendor-advisory)
- psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)