CVE-2011-0627
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk90th percentile - higher than 90% of all known CVEs
Summary
Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content.
Risk Assessment
Attackers may exploit this vulnerability to remotely take control of the system or disrupt its operation, potentially leading to serious security implications for the organization.
Recommendation
It is recommended to update Adobe Flash Player to the latest version to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content, as possibly exploited in the wild in May 2011 by a Microsoft Office document with an embedded .swf file.