CVE-2011-2415
Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.8%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2414.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 11.85% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- adobe/flash player · adobe/adobe air
- Source
- psirt@adobe.com
References
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
- http://secunia.com/advisories/48308
- http://www.adobe.com/support/security/bulletins/apsb11-21.htmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1144.html
- http://www.securityfocus.com/bid/49077
- http://www.us-cert.gov/cas/techalerts/TA11-222A.htmlUS Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13940
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16070
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
- http://secunia.com/advisories/48308
- http://www.adobe.com/support/security/bulletins/apsb11-21.htmlPatch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2011-1144.html
- http://www.securityfocus.com/bid/49077
- http://www.us-cert.gov/cas/techalerts/TA11-222A.htmlUS Government Resource
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13940
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16070
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.