Back to KEVs

CVE-2011-2110

Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to...

Basic Information

CVE State
PUBLISHED
Reserved Date
May 13, 2011
Published Date
June 16, 2011
Last Updated
August 06, 2024
Vendor
Adobe
Product
Flash Player
Description
Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June 2011.
Tags
windows linux macos android metasploit_scanner

CVSS Scores

CVSS v2.0

10.0

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploit Status

Exploited in the Wild
Yes (2011-06-16 23:00:00 UTC) Source

References

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14091 http://secunia.com/advisories/48308 http://secunia.com/advisories/44950 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16252 https://exchange.xforce.ibmcloud.com/vulnerabilities/68029 http://secunia.com/advisories/44941 http://www.redhat.com/support/errata/RHSA-2011-0869.html http://secunia.com/advisories/44964 http://www.us-cert.gov/cas/techalerts/TA11-166A.html http://www.securitytracker.com/id?1025651 https://hermes.opensuse.org/messages/8782873 http://www.adobe.com/support/security/bulletins/apsb11-18.html http://secunia.com/advisories/44924

Known Exploited Vulnerability Information

Source Added Date
CVE 2011-06-16 23:00:00 UTC

Scanner Integrations

Scanner URL Date Detected
Metasploit https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flashplayer_arrayindexing.rb 2025-04-29 11:01:30 UTC

Potential Proof of Concepts

Warning: These PoCs have not been tested and could contain malware. Use at your own risk.

adobe_flashplayer_arrayindexing

Type: metasploit • Created: Unknown

Metasploit module for CVE-2011-2110

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel

  • Detected by Metasploit