CVE-2011-2140

EXPLOITED

Adobe Flash Player <10.3.183.5 - Memory Corruption

Title source: llm

Description

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2417, and CVE-2011-2425.

Exploits (3)

metasploit WORKING POC NORMAL
by Alexander Gavrun, Unknown, sinn3r · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_sps.rb
exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/18479
exploitdb WORKING POC VERIFIED
by Abysssec · textremotewindows
https://www.exploit-db.com/exploits/18437

Scores

EPSS 0.8932
EPSS Percentile 99.5%

Exploitation Intel

VulnCheck KEV 2012-02-10

Classification

CWE
CWE-119
Status draft

Affected Products (50)

adobe/flash_player < 10.3.181.36
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
... and 35 more

Timeline

Published Aug 10, 2011
Tracked Since Feb 18, 2026