Lucene search

K
cve[email protected]CVE-2011-2457
HistoryNov 11, 2011 - 4:55 p.m.

CVE-2011-2457

2011-11-1116:55:01
CWE-119
web.nvd.nist.gov
37
cve-2011-2457
adobe flash player
buffer overflow
nvd
security vulnerability
arbitrary code execution

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.7 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.4%

Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

Affected configurations

NVD
Node
adobeflash_playerRange10.010.3.183.11
OR
adobeflash_playerRange11.011.1.102.55
AND
applemac_os_xMatch-
OR
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-
OR
sunsolarisMatch-
Node
adobeflash_playerRange11.011.1.102.59
AND
googleandroidMatch-
Node
adobeadobe_airRange3.03.1.0.4880

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.7 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.4%