# CVEs published 2011-11-11 27 CVEs were published on November 11, 2011: 0 critical, 0 high. Days are UTC. - [CVE-2011-1375](https://cve.now/CVE-2011-1375.md): IBM AIX 6.1 and 7.1 does not restrict the wpar\_limits\_config and wpar\_limits\_modify system calls, which allows local users to cause a denial (no CVSS) - [CVE-2011-3376](https://cve.now/CVE-2011-3376.md): org/apache/catalina/core/DefaultInstanceManager.java in Apache Tomcat 7.x before 7.0.22 does not properly restrict ContainerServlets in the (no CVSS) - [CVE-2011-4434](https://cve.now/CVE-2011-4434.md): Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 do not properly enforce AppLocker rules, which allows local users to (no CVSS) - [CVE-2011-4435](https://cve.now/CVE-2011-4435.md): The web-server component in the Consolidation and Analysis Engine (CAE) Server in DB2 Query Monitor in IBM DB2 Tools 2.3.0 for z/OS does not (no CVSS) - [CVE-2011-3439](https://cve.now/CVE-2011-3439.md): FreeType in CoreGraphics in Apple iOS before 5.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory co (no CVSS) - [CVE-2011-3440](https://cve.now/CVE-2011-3440.md): The Passcode Lock feature in Apple iOS before 5.0.1 on the iPad 2 does not properly implement the locked state, which allows physically prox (no CVSS) - [CVE-2011-3441](https://cve.now/CVE-2011-3441.md): libinfo in Apple iOS before 5.0.1 does not properly formulate domain-name queries, which allows remote attackers to obtain sensitive informa (no CVSS) - [CVE-2011-3442](https://cve.now/CVE-2011-3442.md): The kernel in Apple iOS before 5.0.1 does not ensure the validity of flag combinations for an mmap system call, which allows local users to (no CVSS) - [CVE-2011-2445](https://cve.now/CVE-2011-2445.md): Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android (no CVSS) - [CVE-2011-2450](https://cve.now/CVE-2011-2450.md): Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android (no CVSS) - [CVE-2011-2451](https://cve.now/CVE-2011-2451.md): Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android (no CVSS) - [CVE-2011-2452](https://cve.now/CVE-2011-2452.md): Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android (no CVSS) - [CVE-2011-2453](https://cve.now/CVE-2011-2453.md): Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android (no CVSS) - [CVE-2011-2454](https://cve.now/CVE-2011-2454.md): Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android (no CVSS) - [CVE-2011-2455](https://cve.now/CVE-2011-2455.md): Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android (no CVSS) - [CVE-2011-2456](https://cve.now/CVE-2011-2456.md): Buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11. (no CVSS) - [CVE-2011-2457](https://cve.now/CVE-2011-2457.md): Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris an (no CVSS) - [CVE-2011-2458](https://cve.now/CVE-2011-2458.md): Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android (no CVSS) - [CVE-2011-2459](https://cve.now/CVE-2011-2459.md): Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android (no CVSS) - [CVE-2011-2460](https://cve.now/CVE-2011-2460.md): Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android (no CVSS) - [CVE-2011-3892](https://cve.now/CVE-2011-3892.md): Double free vulnerability in the Theora decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or (no CVSS) - [CVE-2011-3893](https://cve.now/CVE-2011-3893.md): Google Chrome before 15.0.874.120 does not properly implement the MKV and Vorbis media handlers, which allows remote attackers to cause a de (no CVSS) - [CVE-2011-3894](https://cve.now/CVE-2011-3894.md): Google Chrome before 15.0.874.120 does not properly perform VP8 decoding, which allows remote attackers to cause a denial of service (memory (no CVSS) - [CVE-2011-3895](https://cve.now/CVE-2011-3895.md): Heap-based buffer overflow in the Vorbis decoder in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service o (no CVSS) - [CVE-2011-3896](https://cve.now/CVE-2011-3896.md): Buffer overflow in Google Chrome before 15.0.874.120 allows remote attackers to cause a denial of service or possibly have unspecified other (no CVSS) - [CVE-2011-3897](https://cve.now/CVE-2011-3897.md): Use-after-free vulnerability in Google Chrome before 15.0.874.120 allows user-assisted remote attackers to cause a denial of service or poss (no CVSS) - [CVE-2011-3898](https://cve.now/CVE-2011-3898.md): Google Chrome before 15.0.874.120, when Java Runtime Environment (JRE) 7 is used, does not request user confirmation before applet execution (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2011-11-11 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.