CVE-2011-2424

Description

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by about 400 unique crash signatures.

Risk Information

Base Score
8.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
16.127

Associated Vulnerability

VulnerabilityOS Platform
Upgrade Adobe Air 2.7.1 to latest versionWindows
Upgrade Adobe flash player 10.0.0.584 to latest versionWindows
Vulnerabilities CVE-2011-2424 are affected in Adobe AIR 2.7.1Windows
Multiple vulnerabilities affected in Adobe Flash Player Plugin 10.3.185.25Windows
Multiple vulnerabilities affected in Adobe Flash Player PPAPI 10.3.185.25Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.0Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.1Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.5Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.5.2Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.5.3Windows
Multiple Vulnerabilities are affected in Adobe AIR 2.0.2Windows
Multiple Vulnerabilities are affected in Adobe AIR 2.0.3Windows
Multiple Vulnerabilities are affected in Adobe AIR 2.0.4Windows
Multiple Vulnerabilities are affected in Adobe AIR 2.6Windows
Multiple Vulnerabilities are affected in Adobe AIR 2.7Windows
Multiple Vulnerabilities are affected in Adobe AIR 2.7.1Windows
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.0Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.5Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.1Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.5.2Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.5.3Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 2.0.2Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 2.0.3Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 2.0.4Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 2.6Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 2.7Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 2.7.1Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234