CVE-2011-2136

Опубликовано: 10 авг. 2011

Источник: nvd

CVSS2: 10

EPSS Низкий

Уязвимость выполнения произвольного кода из-за переполнения целочисленной переменной в Adobe Flash Player и Adobe AIR

Описание

Уязвимость переполнения целочисленной переменной в Adobe Flash Player и Adobe AIR позволяет злоумышленникам выполнить произвольный код через неопределенные векторы. Эта уязвимость отличается от CVE-2011-2138 и CVE-2011-2416.

Затронутые версии ПО

Adobe Flash Player до версии 10.3.183.5 на Windows, Mac OS X, Linux и Solaris
Adobe Flash Player до версии 10.3.186.3 на Android
Adobe AIR до версии 2.7.1 на Windows и Mac OS X
Adobe AIR до версии 2.7.1.1961 на Android

Тип уязвимости

Удалённое выполнение кода

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Версия до 10.3.181.36 (включая)

cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.14.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.19.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.24.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.53.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.60.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.61.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.66.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.67.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.68.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.0.73.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.262.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.277.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.0.283.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.0.42.34:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.0.45.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.52.14.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.52.15:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.53.64:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.82.76:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.85.3:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.92.8:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.92.10:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.95.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.95.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.102.64:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.2.152:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.2.152.32:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.2.152.33:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.2.154.13:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.2.154.25:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.2.159.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.3.181.14:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.3.181.16:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.3.181.23:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.3.181.34:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Версия до 10.3.185.25 (включая)

cpe:2.3:a:adobe:flash_player:10.1.92.8:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.92.10:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.95.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.105.6:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.1.106.16:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.2.156.12:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.2.157.51:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.3.185.21:*:*:*:*:*:*:*

cpe:2.3:a:adobe:flash_player:10.3.185.23:*:*:*:*:*:*:*

cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

Одно из

cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*

Версия до 2.7 (включая)

cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:1.5:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:1.5.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:1.5.3:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:2.6:*:*:*:*:*:*:*

Одно из

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

Одно из

cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*

Версия до 2.7 (включая)

cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:1.5:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:1.5.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:1.5.3:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:adobe:adobe_air:2.6:*:*:*:*:*:*:*

cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04528

Низкий

10 Critical

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2011-2136

ubuntu

больше 14 лет назад

Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2138 and CVE-2011-2416.

CVE-2011-2136

redhat

больше 14 лет назад

GHSA-8rh5-93xp-rwp2

github

больше 3 лет назад

EPSS

Процентиль: 89%

0.04528

Низкий

10 Critical

CVSS2

Дефекты

CWE-189