CVE-2011-0558 : Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to ex

Integer overflow in Adobe Flash Player before 10.2.152.26 allows attackers to execute arbitrary code via a large array length value in the ActionScript method of the Function class.

Published 2011-02-10 16:00:32

Updated 2018-10-30 16:26:25

Source Adobe Systems Incorporated

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2011-0558

Adobe » Flash Player
Versions up to, including, (<=) 10.2.152
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0.24.0
cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.28
cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.20
cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.25
cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.18d60
cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0
cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.31
cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.28.0
cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.20.0
cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.31.0
cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.16
cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.1
cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.47.0
cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.48.0
cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.63
cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.69.0
cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.70.0
cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0.34.0
cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0
cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.112.0
cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0
cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.1.1
cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.2
cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.155.0
cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.45.0
cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.1
cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0.35.0
cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0.39.0
cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.114.0
cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.124.0
cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.115.0
cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.0.12.10
cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.0.0.584
cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.159.0
cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.0.22.87
cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.125.0
cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.0.12.36
cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.125.0
cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.260.0
cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.246.0
cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.262.0
cpe:2.3:a:adobe:flash_player:9.0.262.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.152.0
cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.151.0
cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.0.42.34
cpe:2.3:a:adobe:flash_player:10.0.42.34:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.0.15.3
cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.0.32.18
cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.14.0
cpe:2.3:a:adobe:flash_player:7.0.14.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.68.0
cpe:2.3:a:adobe:flash_player:7.0.68.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.67.0
cpe:2.3:a:adobe:flash_player:7.0.67.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.73.0
cpe:2.3:a:adobe:flash_player:7.0.73.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0.42.0
cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.53.0
cpe:2.3:a:adobe:flash_player:7.0.53.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.60.0
cpe:2.3:a:adobe:flash_player:7.0.60.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0.33.0
cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.61.0
cpe:2.3:a:adobe:flash_player:7.0.61.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.66.0
cpe:2.3:a:adobe:flash_player:7.0.66.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.19.0
cpe:2.3:a:adobe:flash_player:7.0.19.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.24.0
cpe:2.3:a:adobe:flash_player:7.0.24.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 6.0.79
cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0.22.0
cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.1.52.15
cpe:2.3:a:adobe:flash_player:10.1.52.15:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.1.52.14.1
cpe:2.3:a:adobe:flash_player:10.1.52.14.1:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.0.45.2
cpe:2.3:a:adobe:flash_player:10.0.45.2:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 6.0.21.0
cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.1.82.76
cpe:2.3:a:adobe:flash_player:10.1.82.76:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.1.92.10
cpe:2.3:a:adobe:flash_player:10.1.92.10:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.1.53.64
cpe:2.3:a:adobe:flash_player:10.1.53.64:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.1.85.3
cpe:2.3:a:adobe:flash_player:10.1.85.3:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.1.95.1
cpe:2.3:a:adobe:flash_player:10.1.95.1:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.1.95.2
cpe:2.3:a:adobe:flash_player:10.1.95.2:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.1.92.8
cpe:2.3:a:adobe:flash_player:10.1.92.8:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.1.102.64
cpe:2.3:a:adobe:flash_player:10.1.102.64:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.277.0
cpe:2.3:a:adobe:flash_player:9.0.277.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.283.0
cpe:2.3:a:adobe:flash_player:9.0.283.0:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2011-0558

EPSS FAQ

1.66%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 87 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2011-0558

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2011-0558

CWE-189

Assigned by: nvd@nist.gov (Primary)

References for CVE-2011-0558

http://www.vupen.com/english/advisories/2011/0348

Webmail | OVH- OVH
Vendor Advisory

CVEs referencing this url
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash2

CVEs referencing this url
https://exchange.xforce.ibmcloud.com/vulnerabilities/65230

Adobe Flash Player ActionScript code execution CVE-2011-0558 Vulnerability Report
http://www.redhat.com/support/errata/RHSA-2011-0368.html

Support
Vendor Advisory

CVEs referencing this url
http://www.securitytracker.com/id?1025055

Adobe Flash Player Flaws Lets Remote Users Execute Arbitrary Code - SecurityTracker

CVEs referencing this url
http://www.adobe.com/support/security/bulletins/apsb11-02.html

Adobe - Security Bulletins: APSB11-02 - Security update available for Adobe Flash Player
Patch;Vendor Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00003.html

[security-announce] SUSE Security Announcement: Flash Player (SUSE-SA:20

CVEs referencing this url
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16129

Repository / Oval Repository
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=893
http://www.vupen.com/english/advisories/2011/0383

Webmail | OVH- OVH
Vendor Advisory

CVEs referencing this url
http://www.redhat.com/support/errata/RHSA-2011-0206.html

Support
Vendor Advisory

CVEs referencing this url
http://www.securityfocus.com/bid/46194

Adobe Flash Player CVE-2011-0558 Remote Integer Overflow Vulnerability
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14056

Repository / Oval Repository
http://www.redhat.com/support/errata/RHSA-2011-0259.html

Support
Vendor Advisory

CVEs referencing this url
http://www.vupen.com/english/advisories/2011/0402

Webmail | OVH- OVH
Vendor Advisory

CVEs referencing this url
http://www.vupen.com/english/advisories/2011/0646

Webmail | OVH- OVH
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2011-0558

Products affected by CVE-2011-0558

Exploit prediction scoring system (EPSS) score for CVE-2011-0558

CVSS scores for CVE-2011-0558

CWE ids for CVE-2011-0558

References for CVE-2011-0558