1. CVE-Search
  2. CVE-2011-0558
ID CVE-2011-0558
Summary Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.
References
Vulnerable Configurations
  • cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.14.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.14.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.19.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.19.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.24.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.24.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.53.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.53.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.60.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.60.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.61.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.61.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.66.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.66.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.67.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.67.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.68.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.68.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.0.73.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.0.73.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.262.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.262.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.277.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.277.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.283.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.283.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.0.42.34:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.0.42.34:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.0.45.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.0.45.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.52.14.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.52.14.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.52.15:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.52.15:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.53.64:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.53.64:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.82.76:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.82.76:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.85.3:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.85.3:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.92.8:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.92.8:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.92.10:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.92.10:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.95.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.95.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.95.2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.95.2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.102.64:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.102.64:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:-:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:-:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:2:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:2:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:3:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:3:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:4:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:4:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:5:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:5:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:6:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:6:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:7:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:7:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:8:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:8:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.9.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.16.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.16.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.280:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.280:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:9.0.289.0:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:9.0.289.0:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.0.2.54:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.0.2.54:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.52.14:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.52.14:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.105.6:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.105.6:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.106.16:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.106.16:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.1.106.17:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.1.106.17:*:*:*:*:*:*:*
  • cpe:2.3:a:adobe:flash_player:10.2.152:*:*:*:*:*:*:*
    cpe:2.3:a:adobe:flash_player:10.2.152:*:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 30-10-2018 - 16:26)
Impact:
Exploitability:
CWE CWE-189
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
oval via4
  • accepted 2015-08-03T04:00:33.856-04:00
    class vulnerability
    contributors
    • name Scott Quint
      organization DTCC
    • name Shane Shaffer
      organization G2, Inc.
    • name Maria Kedovskaya
      organization ALTX-SOFT
    • name Maria Kedovskaya
      organization ALTX-SOFT
    • name Maria Kedovskaya
      organization ALTX-SOFT
    • name Maria Mikhno
      organization ALTX-SOFT
    • name Maria Mikhno
      organization ALTX-SOFT
    • name Maria Mikhno
      organization ALTX-SOFT
    • name Maria Mikhno
      organization ALTX-SOFT
    • name Maria Mikhno
      organization ALTX-SOFT
    definition_extensions
    • comment Adobe Flash Player 9 is installed
      oval oval:org.mitre.oval:def:7402
    • comment Adobe Flash Player is installed
      oval oval:org.mitre.oval:def:6700
    • comment Adobe Flash Player 10 is installed
      oval oval:org.mitre.oval:def:7610
    • comment Adobe Flash Player is installed
      oval oval:org.mitre.oval:def:6700
    • comment Adobe Flash Player is installed
      oval oval:org.mitre.oval:def:6700
    • comment ActiveX Control is installed
      oval oval:org.mitre.oval:def:26707
    description Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.
    family windows
    id oval:org.mitre.oval:def:14056
    status accepted
    submitted 2011-11-04T14:32:37.000-05:00
    title Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.
    version 67
  • accepted 2013-02-04T04:00:43.073-05:00
    class vulnerability
    contributors
    name Shane Shaffer
    organization G2, Inc.
    definition_extensions
    comment Adobe Flash Player is Installed
    oval oval:org.mitre.oval:def:12319
    description Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.
    family macos
    id oval:org.mitre.oval:def:16129
    status accepted
    submitted 2012-12-20T15:35:55.661-05:00
    title Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.
    version 4
redhat via4
advisories
  • rhsa
    id RHSA-2011:0206
  • rhsa
    id RHSA-2011:0259
  • rhsa
    id RHSA-2011:0368
refmap via4
bid 46194
confirm
idefense 20110208 Adobe Flash Player ActionScript Integer Overflow Vulnerability
sectrack 1025055
secunia
  • 43267
  • 43292
  • 43340
  • 43351
  • 43747
suse SUSE-SA:2011:009
vupen
  • ADV-2011-0348
  • ADV-2011-0383
  • ADV-2011-0402
  • ADV-2011-0646
xf flashplayer-actionscript-code-exec(65230)
Last major update 30-10-2018 - 16:26
Published 10-02-2011 - 16:00
Back to Top