CVE-2011-2110
EXPLOITED IN THE WILDAdobe Flash Player <10.3.181.26-10.3.185.23 - RCE
Title source: llmExploitation Summary
CVE-2011-2110 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 2 public exploits from researchers including Metasploit, including a Metasploit module exploits/windows/browser/adobe_flashplayer_arrayindexing.
AI-analyzed exploit summary This Metasploit module exploits a vulnerability in Adobe Flash Player (CVE-2011-2110) by leveraging an AVM2 verification logic flaw to achieve remote code execution. It bypasses ASLR/DEP and is designed to work against multiple browsers and Windows platforms.
Description
Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June 2011.
Exploits (2)
This Metasploit module exploits a vulnerability in Adobe Flash Player (CVE-2011-2110) by leveraging an AVM2 verification logic flaw to achieve remote code execution. It bypasses ASLR/DEP and is designed to work against multiple browsers and Windows platforms.
This Metasploit module exploits CVE-2011-2110, a vulnerability in Adobe Flash Player's AVM2 verification logic, allowing arbitrary code execution via unsafe JIT code execution. It bypasses ASLR/DEP and is reliable across multiple browsers and Windows platforms.