CVE-2011-2460

2011-11-1116:55:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2011-2460

adobe flash player

adobe air

arbitrary code execution

denial of service

memory corruption

9.6 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.009 Low

EPSS

Percentile

82.7%

JSON

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2459.

CPENameOperatorVersion
adobe:flash_playeradobe flash playerlt10.3.183.11
adobe:flash_playeradobe flash playerlt11.1.102.55
adobe:flash_playeradobe flash playerlt11.1.102.59
adobe:adobe_airadobe adobe airlt3.1.0.4880

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	lt	10.3.183.11
adobe:flash_player	adobe flash player	lt	11.1.102.55
adobe:flash_player	adobe flash player	lt	11.1.102.59
adobe:adobe_air	adobe adobe air	lt	3.1.0.4880