Lucene search

K
cve[email protected]CVE-2011-2458
HistoryNov 11, 2011 - 4:55 p.m.

CVE-2011-2458

2011-11-1116:55:01
CWE-264
web.nvd.nist.gov
44
adobe
flash player
vulnerability
cross-domain policy
nvd
cve-2011-2458

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.5%

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.

Affected configurations

NVD
Node
adobeflash_playerRange10.0โ€“10.3.183.11
OR
adobeflash_playerRange11.0โ€“11.1.102.55
AND
applemac_os_xMatch-
OR
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-
OR
sunsolarisMatch-
Node
adobeflash_playerRange11.0โ€“11.1.102.59
AND
googleandroidMatch-
Node
adobeadobe_airRange3.0โ€“3.1.0.4880

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

9 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.5%