CVE-2011-2424

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."

• CWE-119

• http://blogs.adobe.com/asset/2011/08/how-did-you-get-to-that-number.html
• http://googleonlinesecurity.blogspot.com/2011/08/fuzzing-at-scale.html
• http://twitter.com/taviso/statuses/101046246277521409
• http://twitter.com/taviso/statuses/101046396790128640
• http://www.adobe.com/support/security/bulletins/apsb11-21.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2011-1144.html
• http://www.us-cert.gov/cas/techalerts/TA11-222A.htmlUS Government Resource
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14199
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15869
• http://blogs.adobe.com/asset/2011/08/how-did-you-get-to-that-number.html
• http://googleonlinesecurity.blogspot.com/2011/08/fuzzing-at-scale.html
• http://twitter.com/taviso/statuses/101046246277521409
• http://twitter.com/taviso/statuses/101046396790128640
• http://www.adobe.com/support/security/bulletins/apsb11-21.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2011-1144.html
• http://www.us-cert.gov/cas/techalerts/TA11-222A.htmlUS Government Resource
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14199
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15869

Published

Aug 15, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-2418Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2011-2419IML32.dll in Adobe Shockwave Player before 11.6.1.629 allows…
• CVE-2011-2420Adobe Shockwave Player before 11.6.1.629 allows remote attac…
• CVE-2011-2421Dirapi.dll in Adobe Shockwave Player before 11.6.1.629 allow…
• CVE-2011-2422Textra.x32 in Adobe Shockwave Player before 11.6.1.629 allow…
• CVE-2011-2423msvcr90.dll in Adobe Shockwave Player before 11.6.1.629 allo…
• CVE-2011-2425Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, L…
• CVE-2011-2426Stack-based buffer overflow in the ActionScript Virtual Mach…
• CVE-2011-2427Stack-based buffer overflow in the ActionScript Virtual Mach…
• CVE-2011-2428Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, …
• CVE-2011-2429Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, …
• CVE-2011-2430Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, …