Information disclosure in Adobe Flash Player - CVE-2011-2429
Published: December 26, 2016 / Updated: March 14, 2017
Vulnerability identifier: #VU2832
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2011-2429
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Adobe
Affected software:
Adobe Flash Player
Adobe Flash Player
Detailed vulnerability description
The vulnerability allows a remote attacker to obtain potentially sensitive information on the target system.
The weakness exists due to improper access control. A remote attacker can create a specially crafted Web page, trick the victim into visiting it, bypass security retrictions and gain access to important data.
Successful exploitation of the vulnerability results in information disclosure on the vulnerable system.
The weakness exists due to improper access control. A remote attacker can create a specially crafted Web page, trick the victim into visiting it, bypass security retrictions and gain access to important data.
Successful exploitation of the vulnerability results in information disclosure on the vulnerable system.
How to mitigate CVE-2011-2429
Update Flash Player 10.3.183.7 and earlier to 10.3.183.10.
http://www.adobe.com/go/getflash
http://www.adobe.com/licensing/distribution
http://googlechromereleases.blogspot.com/
Update Flash Player 10.3.186.6 and earlier for Android to 10.3.186.7.
https://market.android.com/details?id=com.adobe.flashplayer&hl=en
http://www.adobe.com/go/getflash
http://www.adobe.com/licensing/distribution
http://googlechromereleases.blogspot.com/
Update Flash Player 10.3.186.6 and earlier for Android to 10.3.186.7.
https://market.android.com/details?id=com.adobe.flashplayer&hl=en