CVE-2011-2140
EXPLOITEDAdobe Flash Player <10.3.183.5 - Memory Corruption
Title source: llmExploitation Summary
CVE-2011-2140 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Metasploit, Abysssec, Alexander Gavrun, Unknown, sinn3r, including a Metasploit module exploits/windows/browser/adobe_flash_sps.
AI-analyzed exploit summary This Metasploit module exploits a buffer overflow vulnerability in Adobe Flash Player's handling of MP4 files (CVE-2011-2140). It leverages a crafted MP4 file to achieve arbitrary code execution via heap spraying and a malicious SWF player.
Description
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.
Exploits (3)
This Metasploit module exploits a buffer overflow vulnerability in Adobe Flash Player's handling of MP4 files (CVE-2011-2140). It leverages a crafted MP4 file to achieve arbitrary code execution via heap spraying and a malicious SWF player.
This exploit targets CVE-2011-2140, a vulnerability in Adobe Flash Player <= 10.3.181.34. It uses heap spraying and a malformed MP4 file to achieve remote code execution (RCE) by exploiting a memory corruption issue.
This Metasploit module exploits a buffer overflow vulnerability in Adobe Flash Player's handling of MP4 files (CVE-2011-2140). It delivers a malicious MP4 file via an HTTP server, triggering arbitrary code execution through heap spraying and shellcode injection.