CVE-2011-0623

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-05-13 · updated 2026-06-16
Weakness: CWE-20

Description

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0624, CVE-2011-0625, and CVE-2011-0626.

Affected products

Adobe Flash Player 24.0.0.186 and earlier.: through 10.2.159.1; through 10.2.157.51; 6.0.21.0, 6.0.79, 7.0, 7.0.1, 7.0.14.0, 7.0.19.0 (+76)

References

http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html
http://www.adobe.com/support/security/bulletins/apsb11-12.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13901
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16134
http://lists.opensuse.org/opensuse-security-announce/2011-05/msg00006.html
http://www.adobe.com/support/security/bulletins/apsb11-12.html
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13901
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16134

Get alerted when CVE-2011-0623 or the next vulnerability affects your stack