CVE-2011-2457: Adobe Air

High severity, CVSS 10.0. EPSS: 9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

Affected products

• Adobe Adobe Air: from 3.0, before 3.1.0.4880 (fixed in 3.1.0.4880)
• Adobe Flash Player: from 10.0, before 10.3.183.11 (fixed in 10.3.183.11); from 11.0, before 11.1.102.55 (fixed in 11.1.102.55); from 11.0, before 11.1.102.59 (fixed in 11.1.102.59)

Published 2011-11-11. Last modified 2026-06-16.