CVE-2011-0559

Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted parameters to an…

published February 10, 2011

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

⚠️ A crafty ActionScript method can turn your Adobe Flash Player into a playground for attackers! 🎢 Think of it like a restaurant where a waiter serves food based on a misheard order—it could result in a dish that's not only wrong but potentially hazardous! With this vulnerability, an attacker could execute arbitrary code or cause a memory corruption that leads to a denial of service. This means they could crash your application or even take control of it. Yikes!

Put simply

Think of it like a restaurant where a waiter serves food based on a misheard order—it could result in a dish that's not only wrong but potentially hazardous! Adobe Flash Player versions before 10.2.152.26 are susceptible to this memory corruption issue, where crafted parameters in an ActionScript method can be misused as object pointers, leading to arbitrary code execution.

What to do

With this vulnerability, an attacker could execute arbitrary code or cause a memory corruption that leads to a denial of service. This means they could crash your application or even take control of it. Yikes! Immediately upgrade Adobe Flash Player to version 10.2.152.26 or later to close this gap. If you are unable to update, consider disabling Flash Player to mitigate risks until a patch is applied. Stay safe out there! You've got this! By staying proactive, you'll keep your systems secure and running smoothly! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05218 · 92.5th percentile
Published
2011-02-10T15:00Z
EPSS history
Timeline
  • 10 FEB 15:00Z
    Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted parameters to an…
    cvelistv5