CVE-2011-0559

2011-02-1016:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-0559

adobe flash player

arbitrary code execution

denial of service

memory corruption

actionscript

vulnerability

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.013 Low

EPSS

Percentile

85.9%

JSON

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted parameters to an unspecified ActionScript method that cause a parameter to be used as an object pointer, a different vulnerability than CVE-2011-0560, CVE-2011-0561, CVE-2011-0571, CVE-2011-0572, CVE-2011-0573, CVE-2011-0574, CVE-2011-0578, CVE-2011-0607, and CVE-2011-0608.

CPENameOperatorVersion
adobe:flash_playeradobe flash playereq10.1.52.15
adobe:flash_playeradobe flash playereq9.0.125.0
adobe:flash_playeradobe flash playereq10.1.53.64
adobe:flash_playeradobe flash playereq9.0.48.0
adobe:flash_playeradobe flash playereq9.125.0
adobe:flash_playeradobe flash playereq8.0.24.0
adobe:flash_playeradobe flash playereq7.0.14.0
adobe:flash_playeradobe flash playereq10.0.15.3
adobe:flash_playeradobe flash playereq6.0.79
adobe:flash_playeradobe flash playereq9.0.277.0

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	eq	10.1.52.15
adobe:flash_player	adobe flash player	eq	9.0.125.0
adobe:flash_player	adobe flash player	eq	10.1.53.64
adobe:flash_player	adobe flash player	eq	9.0.48.0
adobe:flash_player	adobe flash player	eq	9.125.0
adobe:flash_player	adobe flash player	eq	8.0.24.0
adobe:flash_player	adobe flash player	eq	7.0.14.0
adobe:flash_player	adobe flash player	eq	10.0.15.3
adobe:flash_player	adobe flash player	eq	6.0.79
adobe:flash_player	adobe flash player	eq	9.0.277.0