CVEvulnerability
CVE-2011-2107
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-06-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."
Affected configurations
• adobe flash player (<= 10.3.181.16)
• adobe flash player 6.0.21.0
• adobe flash player 6.0.79
• adobe flash player 7.0
• adobe flash player 7.0.1
• adobe flash player 7.0.14.0
• adobe flash player 7.0.19.0
• adobe flash player 7.0.24.0
• adobe flash player 7.0.25
• adobe flash player 7.0.53.0
• adobe flash player 7.0.60.0
• adobe flash player 7.0.61.0
• adobe flash player 7.0.63
• adobe flash player 7.0.66.0
• adobe flash player 7.0.67.0
• adobe flash player 7.0.68.0
• adobe flash player 7.0.69.0
• adobe flash player 7.0.70.0
• adobe flash player 7.0.73.0
• adobe flash player 7.1
• adobe flash player 7.1.1
• adobe flash player 7.2
• adobe flash player 8.0
• adobe flash player 8.0.22.0
• adobe flash player 8.0.24.0
• adobe flash player 8.0.33.0
• adobe flash player 8.0.34.0
• adobe flash player 8.0.35.0
• adobe flash player 8.0.39.0
• adobe flash player 8.0.42.0
• adobe flash player 9.0
• adobe flash player 9.0.16
• adobe flash player 9.0.18d60
• adobe flash player 9.0.20
• adobe flash player 9.0.20.0
• adobe flash player 9.0.28
• adobe flash player 9.0.28.0
• adobe flash player 9.0.31
• adobe flash player 9.0.31.0
• adobe flash player 9.0.45.0
• adobe flash player 9.0.47.0
• adobe flash player 9.0.48.0
• adobe flash player 9.0.112.0
• adobe flash player 9.0.114.0
• adobe flash player 9.0.115.0
• adobe flash player 9.0.124.0
• adobe flash player 9.0.125.0
• adobe flash player 9.0.151.0
• adobe flash player 9.0.152.0
• adobe flash player 9.0.155.0
• adobe flash player 9.0.159.0
• adobe flash player 9.0.246.0
• adobe flash player 9.0.260.0
• adobe flash player 9.0.262.0
• adobe flash player 9.0.277.0
• adobe flash player 9.0.283.0
• adobe flash player 9.125.0
• adobe flash player 10.0.0.584
• adobe flash player 10.0.12.10
• adobe flash player 10.0.12.36
… and 68 more
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://googlechromereleases.blogspot.com/2011/06/stable-channel-update.html googlechromereleases.blogspot.com
- http://secunia.com/advisories/44846 secunia.com
- http://secunia.com/advisories/44847 Vendor Advisory
- http://secunia.com/advisories/44871 Vendor Advisory
- http://secunia.com/advisories/44872 Vendor Advisory
- http://secunia.com/advisories/44946 Vendor Advisory
- http://secunia.com/advisories/48308 secunia.com
- http://www.adobe.com/support/security/bulletins/apsb11-13.html Patch, Vendor Advisory
- http://www.blackberry.com/btsc/KB27240 www.blackberry.com
- http://www.redhat.com/support/errata/RHSA-2011-0850.html www.redhat.com
- http://www.securityfocus.com/bid/48107 www.securityfocus.com
- http://www.securitytracker.com/id?1025603 www.securitytracker.com
- http://www.securitytracker.com/id?1025658 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67838 exchange.xforce.ibmcloud.com
- https://hermes.opensuse.org/messages/8704566 hermes.opensuse.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13762 oval.cisecurity.org
- http://googlechromereleases.blogspot.com/2011/06/stable-channel-update.html googlechromereleases.blogspot.com
- http://secunia.com/advisories/44846 secunia.com
- http://secunia.com/advisories/44847 Vendor Advisory
- http://secunia.com/advisories/44871 Vendor Advisory
- http://secunia.com/advisories/44872 Vendor Advisory
- http://secunia.com/advisories/44946 Vendor Advisory
- http://secunia.com/advisories/48308 secunia.com
- http://www.adobe.com/support/security/bulletins/apsb11-13.html Patch, Vendor Advisory
- http://www.blackberry.com/btsc/KB27240 www.blackberry.com
- http://www.redhat.com/support/errata/RHSA-2011-0850.html www.redhat.com
- http://www.securityfocus.com/bid/48107 www.securityfocus.com
- http://www.securitytracker.com/id?1025603 www.securitytracker.com
- http://www.securitytracker.com/id?1025658 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67838 exchange.xforce.ibmcloud.com
- https://hermes.opensuse.org/messages/8704566 hermes.opensuse.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13762 oval.cisecurity.org