CVE-2011-2136

HIGH

Description

Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2138 and CVE-2011-2416.

References

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00007.html

http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00008.html

http://secunia.com/advisories/48308

http://www.adobe.com/support/security/bulletins/apsb11-21.html

http://www.redhat.com/support/errata/RHSA-2011-1144.html

http://www.us-cert.gov/cas/techalerts/TA11-222A.html

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14111

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16128

Details

Source: MITRE

Published: 2011-08-10

Updated: 2018-10-30

Type: CWE-189

Risk Information

CVSS v2.0

Base Score: 10

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 10

Severity: HIGH