CVEvulnerability
CVE-2011-2458
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-11-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.
Affected configurations
• adobe flash player (>= 10.0 < 10.3.183.11)
• adobe flash player (>= 11.0 < 11.1.102.55)
• adobe flash player (>= 11.0 < 11.1.102.59)
• adobe adobe air (>= 3.0 < 3.1.0.4880)
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html Mailing List, Third Party Advisory
- http://secunia.com/advisories/48819 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201204-07.xml Third Party Advisory
- http://www.adobe.com/support/security/bulletins/apsb11-28.html Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14014 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16179 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html Mailing List, Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html Mailing List, Third Party Advisory
- http://secunia.com/advisories/48819 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-201204-07.xml Third Party Advisory
- http://www.adobe.com/support/security/bulletins/apsb11-28.html Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14014 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16179 Third Party Advisory