CVE-2011-0628
Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and...
CVE-2011-0628 is a high vulnerability (CVSS 9.3) in Adobe Flash Player, published May 31, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.27%, the 93rd percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 6.27%EPSS, 93rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code via ActionScript that improperly handles a long array object.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-pluginRed Hat:rhel_extras:5::client From an advisory covering 12 CVEs | before 0:10.3.181.14-1.el5 | 0:10.3.181.14-1.el5 |
flash-pluginRed Hat:rhel_extras:5::server From an advisory covering 12 CVEs | before 0:10.3.181.14-1.el5 | 0:10.3.181.14-1.el5 |
flash-pluginRed Hat:rhel_extras:6 From an advisory covering 12 CVEs | before 0:10.3.181.14-1.el6 | 0:10.3.181.14-1.el6 |
What each source reports
NVD Score used
Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code via ActionScript that improperly handles a long array object.
- Record
CVE-2011-0628- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE ListNo score
Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code via ActionScript that improperly handles a long array object.
- Record
CVE-2011-0628- Updated
- 2026-11-02
EUVDEUVD-2011-0646No score
Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code via ActionScript that improperly handles a long array object.
- Record
EUVD-2011-0646- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9wgf-m28w-v7xfNo score
Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and...
Integer overflow in Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code via ActionScript that improperly handles a long array object.
- Record
GHSA-9wgf-m28w-v7xf- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13994
labs.idefense.com/intelligence/vulnerabilities/display.php?id=908
securityfocus.com/bid/47961
adobe.com/support/security/bulletins/apsb11-12.html
exchange.xforce.ibmcloud.com/vulnerabilities/67638
Show 41 moreShow less
nvd.nist.gov/vuln/detail/CVE-2011-0628
github.com/advisories/GHSA-9wgf-m28w-v7xf
access.redhat.com/errata/RHSA-2011:0511
bugzilla.redhat.com/show_bug.cgi?id=704368
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0511.json
cve.org/CVERecord?id=CVE-2011-0579