CVE-2011-2140

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac…

published August 10, 2011

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.

CVSS
—
EPSS
82%
Percentile
99.7
In the wild
Unconfirmed
What it is

⚠️ A little-known memory corruption vulnerability lurks in Adobe Flash Player and Adobe AIR, waiting to be unleashed by crafty attackers! 🔥 Think of it like a restaurant kitchen that has a secret door for delivery drivers — if it’s left unlocked, anyone can waltz in and tamper with the ingredients! 🍽️ An attacker could potentially execute arbitrary code or trigger a denial of service, leading to system crashes or hijacked sessions — talk about a recipe for disaster! Your devices could be compromised in ways you didn't see coming, leaving you vulnerable to a whole host of attacks.

Put simply

Think of it like a restaurant kitchen that has a secret door for delivery drivers — if it’s left unlocked, anyone can waltz in and tamper with the ingredients! 🍽️ This vulnerability allows for memory corruption through unspecified vectors in Flash Player and AIR, which can lead to severe consequences like arbitrary code execution.

What to do

An attacker could potentially execute arbitrary code or trigger a denial of service, leading to system crashes or hijacked sessions — talk about a recipe for disaster! Your devices could be compromised in ways you didn't see coming, leaving you vulnerable to a whole host of attacks. Ensure all users are running the latest versions: Flash Player should be at least 10.3.183.5 or higher, while Adobe AIR must be updated to 2.7.1 or higher. Review your systems regularly to prevent potential exploitation! 🔒 You've got this! By keeping everything updated, you're not just protecting yourself, but also contributing to a safer internet! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.82258 · 99.7th percentile
Published
2011-08-10T22:00Z
EPSS history
Timeline
  • 10 AUG 22:00Z
    Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac…
    cvelistv5