Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Adobe Flash Player and AIR may be hijacked or crashed

CVE-2011-2417 · published 15 years ago
Summary

Older versions of Adobe Flash Player and Adobe AIR on Windows, macOS, Linux, Solaris, and Android can let attackers run their own code or crash the application. This happens because of a memory handling flaw that can be triggered remotely. Update to the latest versions of Flash Player and AIR as soon as possible to protect your systems.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
adobe flash_player <= 10.3.181.36
6.0.21.0
6.0.79
7.0
7.0.1
7.0.14.0
7.0.19.0
7.0.24.0
7.0.25
7.0.53.0
7.0.60.0
7.0.61.0
80 more version ranges
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
adobe adobe_air <= 2.7
1.0
1.1
1.5
1.5.2
1.5.3
2.0.2
2.0.3
2.0.4
2.6
cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*
Original advisory text
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, ...
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2425.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
8% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published10 Aug 2011
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2011-2417 · NVD
Track software like this
Free during beta