CVE-2011-0558 Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.
HighCVSS 9.3
EPSS 6.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 10.2.152 | No fix listed |
| Adobe flash player | = 6.0.21.0 | No fix listed |
| Adobe flash player | = 6.0.79 | No fix listed |
| Adobe flash player | = 7.0 | No fix listed |
| Adobe flash player | = 7.0.1 | No fix listed |
| Adobe flash player | = 7.0.14.0 | No fix listed |
| Adobe flash player | = 7.0.19.0 | No fix listed |
| Adobe flash player | = 7.0.24.0 | No fix listed |
| Adobe flash player | = 7.0.25 | No fix listed |
| Adobe flash player | = 7.0.53.0 | No fix listed |
| Adobe flash player | = 7.0.60.0 | No fix listed |
| Adobe flash player | = 7.0.61.0 | No fix listed |
| Adobe flash player | = 7.0.63 | No fix listed |
| Adobe flash player | = 7.0.66.0 | No fix listed |
| Adobe flash player | = 7.0.67.0 | No fix listed |
| Adobe flash player | = 7.0.68.0 | No fix listed |
| Adobe flash player | = 7.0.69.0 | No fix listed |
| Adobe flash player | = 7.0.70.0 | No fix listed |
| Adobe flash player | = 7.0.73.0 | No fix listed |
| Adobe flash player | = 7.1 | No fix listed |
| Adobe flash player | = 7.1.1 | No fix listed |
| Adobe flash player | = 7.2 | No fix listed |
| Adobe flash player | = 8.0 | No fix listed |
| Adobe flash player | = 8.0.22.0 | No fix listed |
| Adobe flash player | = 8.0.24.0 | No fix listed |
Show 50 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | = 8.0.33.0 | No fix listed |
| Adobe flash player | = 8.0.34.0 | No fix listed |
| Adobe flash player | = 8.0.35.0 | No fix listed |
| Adobe flash player | = 8.0.39.0 | No fix listed |
| Adobe flash player | = 8.0.42.0 | No fix listed |
| Adobe flash player | = 9.0 | No fix listed |
| Adobe flash player | = 9.0.16 | No fix listed |
| Adobe flash player | = 9.0.18d60 | No fix listed |
| Adobe flash player | = 9.0.20 | No fix listed |
| Adobe flash player | = 9.0.20.0 | No fix listed |
| Adobe flash player | = 9.0.28 | No fix listed |
| Adobe flash player | = 9.0.28.0 | No fix listed |
| Adobe flash player | = 9.0.31 | No fix listed |
| Adobe flash player | = 9.0.31.0 | No fix listed |
| Adobe flash player | = 9.0.45.0 | No fix listed |
| Adobe flash player | = 9.0.47.0 | No fix listed |
| Adobe flash player | = 9.0.48.0 | No fix listed |
| Adobe flash player | = 9.0.112.0 | No fix listed |
| Adobe flash player | = 9.0.114.0 | No fix listed |
| Adobe flash player | = 9.0.115.0 | No fix listed |
| Adobe flash player | = 9.0.124.0 | No fix listed |
| Adobe flash player | = 9.0.125.0 | No fix listed |
| Adobe flash player | = 9.0.151.0 | No fix listed |
| Adobe flash player | = 9.0.152.0 | No fix listed |
| Adobe flash player | = 9.0.155.0 | No fix listed |
| Adobe flash player | = 9.0.159.0 | No fix listed |
| Adobe flash player | = 9.0.246.0 | No fix listed |
| Adobe flash player | = 9.0.260.0 | No fix listed |
| Adobe flash player | = 9.0.262.0 | No fix listed |
| Adobe flash player | = 9.0.277.0 | No fix listed |
| Adobe flash player | = 9.0.283.0 | No fix listed |
| Adobe flash player | = 9.125.0 | No fix listed |
| Adobe flash player | = 10.0.0.584 | No fix listed |
| Adobe flash player | = 10.0.12.10 | No fix listed |
| Adobe flash player | = 10.0.12.36 | No fix listed |
| Adobe flash player | = 10.0.15.3 | No fix listed |
| Adobe flash player | = 10.0.22.87 | No fix listed |
| Adobe flash player | = 10.0.32.18 | No fix listed |
| Adobe flash player | = 10.0.42.34 | No fix listed |
| Adobe flash player | = 10.0.45.2 | No fix listed |
| Adobe flash player | = 10.1.52.14.1 | No fix listed |
| Adobe flash player | = 10.1.52.15 | No fix listed |
| Adobe flash player | = 10.1.53.64 | No fix listed |
| Adobe flash player | = 10.1.82.76 | No fix listed |
| Adobe flash player | = 10.1.85.3 | No fix listed |
| Adobe flash player | = 10.1.92.8 | No fix listed |
| Adobe flash player | = 10.1.92.10 | No fix listed |
| Adobe flash player | = 10.1.95.1 | No fix listed |
| Adobe flash player | = 10.1.95.2 | No fix listed |
| Adobe flash player | = 10.1.102.64 | No fix listed |
References
- blogs.sun.com
- 20110208 Adobe Flash Player ActionScript Integer Overflow Vulnerability third-party-advisory
- SUSE-SA:2011:009 vendor-advisory
- 43267 third-party-advisory vendor-advisory
- 43292 third-party-advisory vendor-advisory
- 43340 third-party-advisory vendor-advisory
- 43351 third-party-advisory vendor-advisory
- 43747 third-party-advisory vendor-advisory
- www.adobe.com patch vendor-advisory
- RHSA-2011:0206 vendor-advisory
- RHSA-2011:0259 vendor-advisory
- RHSA-2011:0368 vendor-advisory
- 46194 vdb-entry
- 1025055 vdb-entry
- ADV-2011-0348 vdb-entry vendor-advisory
- ADV-2011-0383 vdb-entry vendor-advisory
- ADV-2011-0402 vdb-entry vendor-advisory
- ADV-2011-0646 vdb-entry vendor-advisory
- flashplayer-actionscript-code-exec(65230) vdb-entry
- oval:org.mitre.oval:def:14056 signature vdb-entry
- oval:org.mitre.oval:def:16129 signature vdb-entry