critical10.0Public exploit code
CVE-2011-2140
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac O…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adobe Flash Player - MP4 SequenceParameterSetNALUnit Buffer Overflow (Metasploit)2012-02-10 · remote · windows · Verified
- Adobe Flash Player - MP4 SequenceParameterSetNALUnit Remote Code Execution2012-01-31 · remote · windows · Verified
Impact
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Flash Player | through 10.3.181.36 Versions 6.0.21.0, 6.0.79, 7.0, 7.0.1, 7.0.14.0 |
| Adobe | Adobe Air | through 2.7 Versions 1.0, 1.1, 1.5, 1.5.2, 1.5.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
- http://secunia.com/advisories/48308
- http://www.adobe.com/support/security/bulletins/apsb11-21.html
- http://www.redhat.com/support/errata/RHSA-2011-1144.html
- http://www.us-cert.gov/cas/techalerts/TA11-222A.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14074
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html
- http://secunia.com/advisories/48308
- http://www.adobe.com/support/security/bulletins/apsb11-21.html
- http://www.redhat.com/support/errata/RHSA-2011-1144.html
- http://www.us-cert.gov/cas/techalerts/TA11-222A.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14074