Read the docs
TI-2011-01862 Aliases CVE-2011-2139GHSA-pcm6-2v3m-pp43

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before…

Priority LOW 37CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
Partial · Partial · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-264.

Summary

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.

Why it matters now

EPSS 0.05402 92nd percentileScored 2026-11-07
Fix Fixed Red Hat: 2 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 107

CPEVersionsRoleVendor
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*up to 10.3.181.36VulnerableAdobe
cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:*6.0.21.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*6.0.79VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*7.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*7.0.1VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.14.0:*:*:*:*:*:*:*7.0.14.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.19.0:*:*:*:*:*:*:*7.0.19.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.24.0:*:*:*:*:*:*:*7.0.24.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*7.0.25VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.53.0:*:*:*:*:*:*:*7.0.53.0VulnerableAdobe
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* Versions up to 10.3.181.36 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:* Versions 6.0.21.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:* Versions 6.0.79 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.14.0:*:*:*:*:*:*:* Versions 7.0.14.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.19.0:*:*:*:*:*:*:* Versions 7.0.19.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.24.0:*:*:*:*:*:*:* Versions 7.0.24.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:* Versions 7.0.25 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.53.0:*:*:*:*:*:*:* Versions 7.0.53.0 Vulnerable ·Adobe
Show 97 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:adobe:flash_player:7.0.60.0:*:*:*:*:*:*:*7.0.60.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.61.0:*:*:*:*:*:*:*7.0.61.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*7.0.63VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.66.0:*:*:*:*:*:*:*7.0.66.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.67.0:*:*:*:*:*:*:*7.0.67.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.68.0:*:*:*:*:*:*:*7.0.68.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*7.0.69.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*7.0.70.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.0.73.0:*:*:*:*:*:*:*7.0.73.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*7.1VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*7.1.1VulnerableAdobe
cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*7.2VulnerableAdobe
cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*8.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*8.0.22.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*8.0.24.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*8.0.33.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*8.0.34.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*8.0.35.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*8.0.39.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*8.0.42.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*9.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*9.0.16VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*9.0.18d60VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*9.0.20VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*9.0.20.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*9.0.28VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*9.0.28.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*9.0.31VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*9.0.31.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*9.0.45.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*9.0.47.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*9.0.48.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*9.0.112.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*9.0.114.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*9.0.115.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*9.0.124.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*9.0.125.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*9.0.151.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*9.0.152.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*9.0.155.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*9.0.159.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*9.0.246.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*9.0.260.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.262.0:*:*:*:*:*:*:*9.0.262.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.277.0:*:*:*:*:*:*:*9.0.277.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.0.283.0:*:*:*:*:*:*:*9.0.283.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*9.125.0VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*10.0.0.584VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*10.0.12.10VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*10.0.12.36VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*10.0.15.3VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*10.0.22.87VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*10.0.32.18VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.0.42.34:*:*:*:*:*:*:*10.0.42.34VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.0.45.2:*:*:*:*:*:*:*10.0.45.2VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.1.52.14.1:*:*:*:*:*:*:*10.1.52.14.1VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.1.52.15:*:*:*:*:*:*:*10.1.52.15VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.1.53.64:*:*:*:*:*:*:*10.1.53.64VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.1.82.76:*:*:*:*:*:*:*10.1.82.76VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.1.85.3:*:*:*:*:*:*:*10.1.85.3VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.1.92.8:*:*:*:*:*:*:*10.1.92.8VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.1.92.10:*:*:*:*:*:*:*10.1.92.10VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.1.95.1:*:*:*:*:*:*:*10.1.95.1VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.1.95.2:*:*:*:*:*:*:*10.1.95.2VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.1.102.64:*:*:*:*:*:*:*10.1.102.64VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.2.152:*:*:*:*:*:*:*10.2.152VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.2.152.32:*:*:*:*:*:*:*10.2.152.32VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.2.152.33:*:*:*:*:*:*:*10.2.152.33VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.2.154.13:*:*:*:*:*:*:*10.2.154.13VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.2.154.25:*:*:*:*:*:*:*10.2.154.25VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.2.159.1:*:*:*:*:*:*:*10.2.159.1VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.3.181.14:*:*:*:*:*:*:*10.3.181.14VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.3.181.16:*:*:*:*:*:*:*10.3.181.16VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.3.181.23:*:*:*:*:*:*:*10.3.181.23VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.3.181.34:*:*:*:*:*:*:*10.3.181.34VulnerableAdobe
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*all versionsRunning onApple
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*all versionsRunning onLinux
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*all versionsRunning onSun
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*up to 10.3.185.25VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.1.105.6:*:*:*:*:*:*:*10.1.105.6VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.1.106.16:*:*:*:*:*:*:*10.1.106.16VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.2.156.12:*:*:*:*:*:*:*10.2.156.12VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.2.157.51:*:*:*:*:*:*:*10.2.157.51VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.3.185.21:*:*:*:*:*:*:*10.3.185.21VulnerableAdobe
cpe:2.3:a:adobe:flash_player:10.3.185.23:*:*:*:*:*:*:*10.3.185.23VulnerableAdobe
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*all versionsRunning onGoogle
cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*up to 2.7VulnerableAdobe
cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*1.0VulnerableAdobe
cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*1.1VulnerableAdobe
cpe:2.3:a:adobe:adobe_air:1.5:*:*:*:*:*:*:*1.5VulnerableAdobe
cpe:2.3:a:adobe:adobe_air:1.5.2:*:*:*:*:*:*:*1.5.2VulnerableAdobe
cpe:2.3:a:adobe:adobe_air:1.5.3:*:*:*:*:*:*:*1.5.3VulnerableAdobe
cpe:2.3:a:adobe:adobe_air:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableAdobe
cpe:2.3:a:adobe:adobe_air:2.0.3:*:*:*:*:*:*:*2.0.3VulnerableAdobe
cpe:2.3:a:adobe:adobe_air:2.0.4:*:*:*:*:*:*:*2.0.4VulnerableAdobe
cpe:2.3:a:adobe:adobe_air:2.6:*:*:*:*:*:*:*2.6VulnerableAdobe
  • cpe:2.3:a:adobe:flash_player:7.0.60.0:*:*:*:*:*:*:* Versions 7.0.60.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.61.0:*:*:*:*:*:*:* Versions 7.0.61.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:* Versions 7.0.63 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.66.0:*:*:*:*:*:*:* Versions 7.0.66.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.67.0:*:*:*:*:*:*:* Versions 7.0.67.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.68.0:*:*:*:*:*:*:* Versions 7.0.68.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:* Versions 7.0.69.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:* Versions 7.0.70.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.0.73.0:*:*:*:*:*:*:* Versions 7.0.73.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:* Versions 7.1.1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:* Versions 8.0.22.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:* Versions 8.0.24.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:* Versions 8.0.33.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:* Versions 8.0.34.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:* Versions 8.0.35.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:* Versions 8.0.39.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:* Versions 8.0.42.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:* Versions 9.0.16 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:* Versions 9.0.18d60 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:* Versions 9.0.20 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:* Versions 9.0.20.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:* Versions 9.0.28 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:* Versions 9.0.28.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:* Versions 9.0.31 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:* Versions 9.0.31.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:* Versions 9.0.45.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:* Versions 9.0.47.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:* Versions 9.0.48.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:* Versions 9.0.112.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:* Versions 9.0.114.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:* Versions 9.0.115.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:* Versions 9.0.124.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:* Versions 9.0.125.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:* Versions 9.0.151.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:* Versions 9.0.152.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:* Versions 9.0.155.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:* Versions 9.0.159.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:* Versions 9.0.246.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:* Versions 9.0.260.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.262.0:*:*:*:*:*:*:* Versions 9.0.262.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.277.0:*:*:*:*:*:*:* Versions 9.0.277.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.0.283.0:*:*:*:*:*:*:* Versions 9.0.283.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:* Versions 9.125.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:* Versions 10.0.0.584 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:* Versions 10.0.12.10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:* Versions 10.0.12.36 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:* Versions 10.0.15.3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:* Versions 10.0.22.87 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:* Versions 10.0.32.18 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.0.42.34:*:*:*:*:*:*:* Versions 10.0.42.34 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.0.45.2:*:*:*:*:*:*:* Versions 10.0.45.2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.1.52.14.1:*:*:*:*:*:*:* Versions 10.1.52.14.1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.1.52.15:*:*:*:*:*:*:* Versions 10.1.52.15 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.1.53.64:*:*:*:*:*:*:* Versions 10.1.53.64 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.1.82.76:*:*:*:*:*:*:* Versions 10.1.82.76 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.1.85.3:*:*:*:*:*:*:* Versions 10.1.85.3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.1.92.8:*:*:*:*:*:*:* Versions 10.1.92.8 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.1.92.10:*:*:*:*:*:*:* Versions 10.1.92.10 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.1.95.1:*:*:*:*:*:*:* Versions 10.1.95.1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.1.95.2:*:*:*:*:*:*:* Versions 10.1.95.2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.1.102.64:*:*:*:*:*:*:* Versions 10.1.102.64 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.2.152:*:*:*:*:*:*:* Versions 10.2.152 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.2.152.32:*:*:*:*:*:*:* Versions 10.2.152.32 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.2.152.33:*:*:*:*:*:*:* Versions 10.2.152.33 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.2.154.13:*:*:*:*:*:*:* Versions 10.2.154.13 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.2.154.25:*:*:*:*:*:*:* Versions 10.2.154.25 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.2.159.1:*:*:*:*:*:*:* Versions 10.2.159.1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.3.181.14:*:*:*:*:*:*:* Versions 10.3.181.14 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.3.181.16:*:*:*:*:*:*:* Versions 10.3.181.16 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.3.181.23:*:*:*:*:*:*:* Versions 10.3.181.23 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.3.181.34:*:*:*:*:*:*:* Versions 10.3.181.34 Vulnerable ·Adobe
  • cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* Versions all versions Running on ·Apple
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions all versions Running on ·Linux
  • cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:* Versions all versions Running on ·Sun
  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* Versions up to 10.3.185.25 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.1.105.6:*:*:*:*:*:*:* Versions 10.1.105.6 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.1.106.16:*:*:*:*:*:*:* Versions 10.1.106.16 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.2.156.12:*:*:*:*:*:*:* Versions 10.2.156.12 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.2.157.51:*:*:*:*:*:*:* Versions 10.2.157.51 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.3.185.21:*:*:*:*:*:*:* Versions 10.3.185.21 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:flash_player:10.3.185.23:*:*:*:*:*:*:* Versions 10.3.185.23 Vulnerable ·Adobe
  • cpe:2.3:o:google:android:*:*:*:*:*:*:*:* Versions all versions Running on ·Google
  • cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:* Versions up to 2.7 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:adobe_air:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:adobe_air:1.5.2:*:*:*:*:*:*:* Versions 1.5.2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:adobe_air:1.5.3:*:*:*:*:*:*:* Versions 1.5.3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:adobe_air:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:adobe_air:2.0.3:*:*:*:*:*:*:* Versions 2.0.3 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:adobe_air:2.0.4:*:*:*:*:*:*:* Versions 2.0.4 Vulnerable ·Adobe
  • cpe:2.3:a:adobe:adobe_air:2.6:*:*:*:*:*:*:* Versions 2.6 Vulnerable ·Adobe

Remediation

Red Hat 2 advisories

  • RHSA-2011:1434 Released 2011-11-08 · Red Hat rating Critical
    acroread security update
    • Red Hat Desktop version 4 Extras acroread-9.4.6-1.el4.i386, acroread-plugin-9.4.6-1.el4.i386
    • Red Hat Enterprise Linux AS version 4 Extras acroread-9.4.6-1.el4.i386, acroread-plugin-9.4.6-1.el4.i386
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) acroread-9.4.6-1.el5.i386, acroread-plugin-9.4.6-1.el5.i386
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) acroread-9.4.6-1.el6, acroread-plugin-9.4.6-1.el6
    • Red Hat Enterprise Linux ES version 4 Extras acroread-9.4.6-1.el4.i386, acroread-plugin-9.4.6-1.el4.i386
    • Red Hat Enterprise Linux Server Supplementary (v. 5) acroread-9.4.6-1.el5.i386, acroread-plugin-9.4.6-1.el5.i386
    • Red Hat Enterprise Linux Server Supplementary (v. 6) acroread-9.4.6-1.el6, acroread-plugin-9.4.6-1.el6
    • Red Hat Enterprise Linux WS version 4 Extras acroread-9.4.6-1.el4.i386, acroread-plugin-9.4.6-1.el4.i386
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) acroread-9.4.6-1.el6, acroread-plugin-9.4.6-1.el6
  • RHSA-2011:1144 Released 2011-08-10 · Red Hat rating Critical
    flash-plugin security update
    • Red Hat Enterprise Linux Desktop Supplementary (v. 5) flash-plugin-10.3.183.5-1.el5.i386
    • Red Hat Enterprise Linux Desktop Supplementary (v. 6) flash-plugin-10.3.183.5-1.el6
    • Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin-10.3.183.5-1.el5.i386
    • Red Hat Enterprise Linux Server Supplementary (v. 6) flash-plugin-10.3.183.5-1.el6
    • Red Hat Enterprise Linux Workstation Supplementary (v. 6) flash-plugin-10.3.183.5-1.el6

Vendor assessments

Red Hat

Red Hat rating: Critical. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Desktop version 4 ExtrasFixed RHSA-2011:1434
Red Hat Enterprise Linux AS version 4 ExtrasFixed RHSA-2011:1434
Red Hat Enterprise Linux Desktop Supplementary (v. 5)Fixed RHSA-2011:1144, RHSA-2011:1434
Red Hat Enterprise Linux Desktop Supplementary (v. 6)Fixed RHSA-2011:1144, RHSA-2011:1434
Red Hat Enterprise Linux ES version 4 ExtrasFixed RHSA-2011:1434
Red Hat Enterprise Linux Server Supplementary (v. 5)Fixed RHSA-2011:1144, RHSA-2011:1434
Red Hat Enterprise Linux Server Supplementary (v. 6)Fixed RHSA-2011:1144, RHSA-2011:1434
Red Hat Enterprise Linux WS version 4 ExtrasFixed RHSA-2011:1434
Red Hat Enterprise Linux Workstation Supplementary (v. 6)Fixed RHSA-2011:1144, RHSA-2011:1434

Timeline

  1. 2026-10-02 Threatist record created from CVE-2011-2139
  2. 2026-10-03 Alias added: GHSA-pcm6-2v3m-pp43

References

Patch 1

Advisory 5

Other 2

  • TI-2014-00481 Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through… KEVCVSS 3.1HIGH 8.8
  • TI-2011-00534 Adobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and… KEVCVSS 3.1HIGH 8.8
  • TI-2014-00534 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x… CVSS 2.0HIGH 10.0
  • TI-2011-01863 Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before… CVSS 2.0HIGH 10.0
  • TI-2014-00537 Heap-based buffer overflow in Adobe Flash Player before 13.0.0.244 and 14.x and 15.x… CVSS 2.0HIGH 10.0
  • TI-2011-02110 Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and… CVSS 2.0HIGH 10.0
See all 145 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences