CVE-2011-2424: Buffer Overflow
First published: Mon Aug 15 2011(Updated: )
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Flash Player | <=10.3.181.36 | |
| Adobe Flash Player | =6.0.21.0 | |
| Adobe Flash Player | =6.0.79 | |
| Adobe Flash Player | =7.0 | |
| Adobe Flash Player | =7.0.1 | |
| Adobe Flash Player | =7.0.14.0 | |
| Adobe Flash Player | =7.0.19.0 | |
| Adobe Flash Player | =7.0.24.0 | |
| Adobe Flash Player | =7.0.25 | |
| Adobe Flash Player | =7.0.53.0 | |
| Adobe Flash Player | =7.0.60.0 | |
| Adobe Flash Player | =7.0.61.0 | |
| Adobe Flash Player | =7.0.63 | |
| Adobe Flash Player | =7.0.66.0 | |
| Adobe Flash Player | =7.0.67.0 | |
| Adobe Flash Player | =7.0.68.0 | |
| Adobe Flash Player | =7.0.69.0 | |
| Adobe Flash Player | =7.0.70.0 | |
| Adobe Flash Player | =7.0.73.0 | |
| Adobe Flash Player | =7.1 | |
| Adobe Flash Player | =7.1.1 | |
| Adobe Flash Player | =7.2 | |
| Adobe Flash Player | =8.0 | |
| Adobe Flash Player | =8.0.22.0 | |
| Adobe Flash Player | =8.0.24.0 | |
| Adobe Flash Player | =8.0.33.0 | |
| Adobe Flash Player | =8.0.34.0 | |
| Adobe Flash Player | =8.0.35.0 | |
| Adobe Flash Player | =8.0.39.0 | |
| Adobe Flash Player | =8.0.42.0 | |
| Adobe Flash Player | =9.0 | |
| Adobe Flash Player | =9.0.16 | |
| Adobe Flash Player | =9.0.18d60 | |
| Adobe Flash Player | =9.0.20 | |
| Adobe Flash Player | =9.0.20.0 | |
| Adobe Flash Player | =9.0.28 | |
| Adobe Flash Player | =9.0.28.0 | |
| Adobe Flash Player | =9.0.31 | |
| Adobe Flash Player | =9.0.31.0 | |
| Adobe Flash Player | =9.0.45.0 | |
| Adobe Flash Player | =9.0.47.0 | |
| Adobe Flash Player | =9.0.48.0 | |
| Adobe Flash Player | =9.0.112.0 | |
| Adobe Flash Player | =9.0.114.0 | |
| Adobe Flash Player | =9.0.115.0 | |
| Adobe Flash Player | =9.0.124.0 | |
| Adobe Flash Player | =9.0.125.0 | |
| Adobe Flash Player | =9.0.151.0 | |
| Adobe Flash Player | =9.0.152.0 | |
| Adobe Flash Player | =9.0.155.0 | |
| Adobe Flash Player | =9.0.159.0 | |
| Adobe Flash Player | =9.0.246.0 | |
| Adobe Flash Player | =9.0.260.0 | |
| Adobe Flash Player | =9.0.262.0 | |
| Adobe Flash Player | =9.0.277.0 | |
| Adobe Flash Player | =9.0.283.0 | |
| Adobe Flash Player | =9.125.0 | |
| Adobe Flash Player | =10.0.0.584 | |
| Adobe Flash Player | =10.0.12.10 | |
| Adobe Flash Player | =10.0.12.36 | |
| Adobe Flash Player | =10.0.15.3 | |
| Adobe Flash Player | =10.0.22.87 | |
| Adobe Flash Player | =10.0.32.18 | |
| Adobe Flash Player | =10.0.42.34 | |
| Adobe Flash Player | =10.0.45.2 | |
| Adobe Flash Player | =10.1.52.14.1 | |
| Adobe Flash Player | =10.1.52.15 | |
| Adobe Flash Player | =10.1.53.64 | |
| Adobe Flash Player | =10.1.82.76 | |
| Adobe Flash Player | =10.1.85.3 | |
| Adobe Flash Player | =10.1.92.8 | |
| Adobe Flash Player | =10.1.92.10 | |
| Adobe Flash Player | =10.1.95.1 | |
| Adobe Flash Player | =10.1.95.2 | |
| Adobe Flash Player | =10.1.102.64 | |
| Adobe Flash Player | =10.2.152 | |
| Adobe Flash Player | =10.2.152.32 | |
| Adobe Flash Player | =10.2.152.33 | |
| Adobe Flash Player | =10.2.154.13 | |
| Adobe Flash Player | =10.2.154.25 | |
| Adobe Flash Player | =10.2.159.1 | |
| Adobe Flash Player | =10.3.181.14 | |
| Adobe Flash Player | =10.3.181.16 | |
| Adobe Flash Player | =10.3.181.23 | |
| Adobe Flash Player | =10.3.181.34 | |
| Apple Mac OS X | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Sun SunOS | ||
| Adobe Flash Player | <=10.3.185.25 | |
| Adobe Flash Player | =10.1.105.6 | |
| Adobe Flash Player | =10.1.106.16 | |
| Adobe Flash Player | =10.2.156.12 | |
| Adobe Flash Player | =10.2.157.51 | |
| Adobe Flash Player | =10.3.185.21 | |
| Adobe Flash Player | =10.3.185.23 | |
| Google Android | ||
| Adobe Adobe Air | <=2.7 | |
| Adobe Adobe Air | =1.0 | |
| Adobe Adobe Air | =1.1 | |
| Adobe Adobe Air | =1.5 | |
| Adobe Adobe Air | =1.5.2 | |
| Adobe Adobe Air | =1.5.3 | |
| Adobe Adobe Air | =2.0.2 | |
| Adobe Adobe Air | =2.0.3 | |
| Adobe Adobe Air | =2.0.4 | |
| Adobe Adobe Air | =2.6 | |
| Adobe Adobe Air | <=2.7.1 | |
| Adobe Adobe Air | =2.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://blogs.adobe.com/asset/2011/08/how-did-you-get-to-that-number.html
- http://googleonlinesecurity.blogspot.com/2011/08/fuzzing-at-scale.html
- http://twitter.com/taviso/statuses/101046246277521409
- http://twitter.com/taviso/statuses/101046396790128640
- http://www.adobe.com/support/security/bulletins/apsb11-21.html
- http://www.redhat.com/support/errata/RHSA-2011-1144.html
- http://www.us-cert.gov/cas/techalerts/TA11-222A.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15869
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14199
- collector/nvd-historical
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/remedy
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/adobe
- canonical/adobe flash player
- version/adobe flash player/10.3.181.36
- version/adobe flash player/6.0.21.0
- version/adobe flash player/6.0.79
- version/adobe flash player/7.0
- version/adobe flash player/7.0.1
- version/adobe flash player/7.0.14.0
- version/adobe flash player/7.0.19.0
- version/adobe flash player/7.0.24.0
- version/adobe flash player/7.0.25
- version/adobe flash player/7.0.53.0
- version/adobe flash player/7.0.60.0
- version/adobe flash player/7.0.61.0
- version/adobe flash player/7.0.63
- version/adobe flash player/7.0.66.0
- version/adobe flash player/7.0.67.0
- version/adobe flash player/7.0.68.0
- version/adobe flash player/7.0.69.0
- version/adobe flash player/7.0.70.0
- version/adobe flash player/7.0.73.0
- version/adobe flash player/7.1
- version/adobe flash player/7.1.1
- version/adobe flash player/7.2
- version/adobe flash player/8.0
- version/adobe flash player/8.0.22.0
- version/adobe flash player/8.0.24.0
- version/adobe flash player/8.0.33.0
- version/adobe flash player/8.0.34.0
- version/adobe flash player/8.0.35.0
- version/adobe flash player/8.0.39.0
- version/adobe flash player/8.0.42.0
- version/adobe flash player/9.0
- version/adobe flash player/9.0.16
- version/adobe flash player/9.0.18d60
- version/adobe flash player/9.0.20
- version/adobe flash player/9.0.20.0
- version/adobe flash player/9.0.28
- version/adobe flash player/9.0.28.0
- version/adobe flash player/9.0.31
- version/adobe flash player/9.0.31.0
- version/adobe flash player/9.0.45.0
- version/adobe flash player/9.0.47.0
- version/adobe flash player/9.0.48.0
- version/adobe flash player/9.0.112.0
- version/adobe flash player/9.0.114.0
- version/adobe flash player/9.0.115.0
- version/adobe flash player/9.0.124.0
- version/adobe flash player/9.0.125.0
- version/adobe flash player/9.0.151.0
- version/adobe flash player/9.0.152.0
- version/adobe flash player/9.0.155.0
- version/adobe flash player/9.0.159.0
- version/adobe flash player/9.0.246.0
- version/adobe flash player/9.0.260.0
- version/adobe flash player/9.0.262.0
- version/adobe flash player/9.0.277.0
- version/adobe flash player/9.0.283.0
- version/adobe flash player/9.125.0
- version/adobe flash player/10.0.0.584
- version/adobe flash player/10.0.12.10
- version/adobe flash player/10.0.12.36
- version/adobe flash player/10.0.15.3
- version/adobe flash player/10.0.22.87
- version/adobe flash player/10.0.32.18
- version/adobe flash player/10.0.42.34
- version/adobe flash player/10.0.45.2
- version/adobe flash player/10.1.52.14.1
- version/adobe flash player/10.1.52.15
- version/adobe flash player/10.1.53.64
- version/adobe flash player/10.1.82.76
- version/adobe flash player/10.1.85.3
- version/adobe flash player/10.1.92.8
- version/adobe flash player/10.1.92.10
- version/adobe flash player/10.1.95.1
- version/adobe flash player/10.1.95.2
- version/adobe flash player/10.1.102.64
- version/adobe flash player/10.2.152
- version/adobe flash player/10.2.152.32
- version/adobe flash player/10.2.152.33
- version/adobe flash player/10.2.154.13
- version/adobe flash player/10.2.154.25
- version/adobe flash player/10.2.159.1
- version/adobe flash player/10.3.181.14
- version/adobe flash player/10.3.181.16
- version/adobe flash player/10.3.181.23
- version/adobe flash player/10.3.181.34
- vendor/apple
- canonical/apple mac os x
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/sun
- canonical/sun sunos
- version/adobe flash player/10.3.185.25
- version/adobe flash player/10.1.105.6
- version/adobe flash player/10.1.106.16
- version/adobe flash player/10.2.156.12
- version/adobe flash player/10.2.157.51
- version/adobe flash player/10.3.185.21
- version/adobe flash player/10.3.185.23
- vendor/google
- canonical/google android
- canonical/adobe adobe air
- version/adobe adobe air/2.7
- version/adobe adobe air/1.0
- version/adobe adobe air/1.1
- version/adobe adobe air/1.5
- version/adobe adobe air/1.5.2
- version/adobe adobe air/1.5.3
- version/adobe adobe air/2.0.2
- version/adobe adobe air/2.0.3
- version/adobe adobe air/2.0.4
- version/adobe adobe air/2.6
- version/adobe adobe air/2.7.1