CVE-2011-2107
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors,…
Does this matter?
Lower severity and a low EPSS score (3.55%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
- EPSS
- 3.55% probability · 89th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- adobe/flash player · adobe/acrobat · adobe/acrobat reader
- Source
- psirt@adobe.com
References
- http://googlechromereleases.blogspot.com/2011/06/stable-channel-update.html
- http://secunia.com/advisories/44846
- http://secunia.com/advisories/44847Vendor Advisory
- http://secunia.com/advisories/44871Vendor Advisory
- http://secunia.com/advisories/44872Vendor Advisory
- http://secunia.com/advisories/44946Vendor Advisory
- http://secunia.com/advisories/48308
- http://www.adobe.com/support/security/bulletins/apsb11-13.htmlPatch, Vendor Advisory
- http://www.blackberry.com/btsc/KB27240
- http://www.redhat.com/support/errata/RHSA-2011-0850.html
- http://www.securityfocus.com/bid/48107
- http://www.securitytracker.com/id?1025603
- http://www.securitytracker.com/id?1025658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67838
- https://hermes.opensuse.org/messages/8704566
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13762
- http://googlechromereleases.blogspot.com/2011/06/stable-channel-update.html
- http://secunia.com/advisories/44846
- http://secunia.com/advisories/44847Vendor Advisory
- http://secunia.com/advisories/44871Vendor Advisory
- http://secunia.com/advisories/44872Vendor Advisory
- http://secunia.com/advisories/44946Vendor Advisory
- http://secunia.com/advisories/48308
- http://www.adobe.com/support/security/bulletins/apsb11-13.htmlPatch, Vendor Advisory
- http://www.blackberry.com/btsc/KB27240
- http://www.redhat.com/support/errata/RHSA-2011-0850.html
- http://www.securityfocus.com/bid/48107
- http://www.securitytracker.com/id?1025603
- http://www.securitytracker.com/id?1025658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67838
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.