peter bassill · operator
$ cve CVE-2011-2110 JSON

CVE-2011-2110 EXPLOIT

10.0
HIGH · CVSS 2.0 · EPSS 86.4% (pctl 100)

Patch early

A public exploit exists.

Description

Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June 2011.

Scoring

CVSS10.0 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS86.42% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2011-06-16
Last modified2026-06-16

Affected (6)

VendorProduct
adobeflash player
applemac os x
googleandroid
linuxlinux kernel
microsoftwindows
sunsunos

Public exploits

SourceTitleDate
exploit-dbAdobe Flash Player - AVM Verification Logic Array Indexing Code Execution (Metasploit)2012-06-20

References

→ the Explorer  ·  watch your stack  ·  NVD