Vulnerability Description
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Flash Player | <= 10.3.181.16 |
| Apple | Mac Os X | All versions |
| Linux | Linux Kernel | 2.6.0 |
| Microsoft | Windows | All versions |
| Sun | Sunos | All versions |
| Android | All versions | |
| Adobe | Acrobat | <= 10.0.3 |
| Adobe | Acrobat Reader | <= 10.0.3 |
Related Weaknesses (CWE)
References
- http://googlechromereleases.blogspot.com/2011/06/stable-channel-update.html
- http://secunia.com/advisories/44846
- http://secunia.com/advisories/44847Vendor Advisory
- http://secunia.com/advisories/44871Vendor Advisory
- http://secunia.com/advisories/44872Vendor Advisory
- http://secunia.com/advisories/44946Vendor Advisory
- http://secunia.com/advisories/48308
- http://www.adobe.com/support/security/bulletins/apsb11-13.htmlPatchVendor Advisory
- http://www.blackberry.com/btsc/KB27240
- http://www.redhat.com/support/errata/RHSA-2011-0850.html
- http://www.securityfocus.com/bid/48107
- http://www.securitytracker.com/id?1025603
- http://www.securitytracker.com/id?1025658
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67838
- https://hermes.opensuse.org/messages/8704566
FAQ
What is CVE-2011-2107?
CVE-2011-2107 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject ar...
How severe is CVE-2011-2107?
CVE-2011-2107 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-2107?
Check the references section above for vendor advisories and patch information. Affected products include: Adobe Flash Player, Apple Mac Os X, Linux Linux Kernel, Microsoft Windows, Sun Sunos.