Lucene search

[email protected]NVD:CVE-2011-2107

HistoryJun 09, 2011 - 2:38 a.m.

CVE-2011-2107

2011-06-0902:38:36

CWE-79

[email protected]

web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.3%

JSON

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a “universal cross-site scripting vulnerability.”

Affected configurations

NVD

Node

adobeflash_playerRange≤10.3.181.16

adobeflash_playerMatch6.0.21.0

adobeflash_playerMatch6.0.79

adobeflash_playerMatch7.0

adobeflash_playerMatch7.0.1

adobeflash_playerMatch7.0.14.0

adobeflash_playerMatch7.0.19.0

adobeflash_playerMatch7.0.24.0

adobeflash_playerMatch7.0.25

adobeflash_playerMatch7.0.53.0

adobeflash_playerMatch7.0.60.0

adobeflash_playerMatch7.0.61.0

adobeflash_playerMatch7.0.63

adobeflash_playerMatch7.0.66.0

adobeflash_playerMatch7.0.67.0

adobeflash_playerMatch7.0.68.0

adobeflash_playerMatch7.0.69.0

adobeflash_playerMatch7.0.70.0

adobeflash_playerMatch7.0.73.0

adobeflash_playerMatch7.1

adobeflash_playerMatch7.1.1

adobeflash_playerMatch7.2

adobeflash_playerMatch8.0

adobeflash_playerMatch8.0.22.0

adobeflash_playerMatch8.0.24.0

adobeflash_playerMatch8.0.33.0

adobeflash_playerMatch8.0.34.0

adobeflash_playerMatch8.0.35.0

adobeflash_playerMatch8.0.39.0

adobeflash_playerMatch8.0.42.0

adobeflash_playerMatch9.0

adobeflash_playerMatch9.0.16

adobeflash_playerMatch9.0.18d60

adobeflash_playerMatch9.0.20

adobeflash_playerMatch9.0.20.0

adobeflash_playerMatch9.0.28

adobeflash_playerMatch9.0.28.0

adobeflash_playerMatch9.0.31

adobeflash_playerMatch9.0.31.0

adobeflash_playerMatch9.0.45.0

adobeflash_playerMatch9.0.47.0

adobeflash_playerMatch9.0.48.0

adobeflash_playerMatch9.0.112.0

adobeflash_playerMatch9.0.114.0

adobeflash_playerMatch9.0.115.0

adobeflash_playerMatch9.0.124.0

adobeflash_playerMatch9.0.125.0

adobeflash_playerMatch9.0.151.0

adobeflash_playerMatch9.0.152.0

adobeflash_playerMatch9.0.155.0

adobeflash_playerMatch9.0.159.0

adobeflash_playerMatch9.0.246.0

adobeflash_playerMatch9.0.260.0

adobeflash_playerMatch9.0.262.0

adobeflash_playerMatch9.0.277.0

adobeflash_playerMatch9.0.283.0

adobeflash_playerMatch9.125.0

adobeflash_playerMatch10.0.0.584

adobeflash_playerMatch10.0.12.10

adobeflash_playerMatch10.0.12.36

adobeflash_playerMatch10.0.15.3

adobeflash_playerMatch10.0.22.87

adobeflash_playerMatch10.0.32.18

adobeflash_playerMatch10.0.42.34

adobeflash_playerMatch10.0.45.2

adobeflash_playerMatch10.1.52.14.1

adobeflash_playerMatch10.1.52.15

adobeflash_playerMatch10.1.53.64

adobeflash_playerMatch10.1.82.76

adobeflash_playerMatch10.1.85.3

adobeflash_playerMatch10.1.92.8

adobeflash_playerMatch10.1.92.10

adobeflash_playerMatch10.1.95.1

adobeflash_playerMatch10.1.95.2

adobeflash_playerMatch10.1.102.64

adobeflash_playerMatch10.2.152

adobeflash_playerMatch10.2.152.32

adobeflash_playerMatch10.2.152.33

adobeflash_playerMatch10.2.153.1

adobeflash_playerMatch10.2.154.13

adobeflash_playerMatch10.2.154.25

adobeflash_playerMatch10.2.159.1

adobeflash_playerMatch10.3.181.14

AND

applemac_os_x

linuxlinux_kernelMatch2.6.0

microsoftwindows

sunsunos

Node

adobeflash_playerRange≤10.3.185.22

adobeflash_playerMatch10.1.92.8

adobeflash_playerMatch10.1.92.10

adobeflash_playerMatch10.1.95.2

adobeflash_playerMatch10.1.105.6

adobeflash_playerMatch10.1.106.16

adobeflash_playerMatch10.2.156.12

adobeflash_playerMatch10.2.157.51

AND

googleandroid

Node

adobeacrobatRange≤10.0.3

adobeacrobatMatch9.0

adobeacrobatMatch9.1

adobeacrobatMatch9.1.1

adobeacrobatMatch9.1.2

adobeacrobatMatch9.1.3

adobeacrobatMatch9.2

adobeacrobatMatch9.3

adobeacrobatMatch9.3.1

adobeacrobatMatch9.3.2

adobeacrobatMatch9.3.3

adobeacrobatMatch9.3.4

adobeacrobatMatch9.4

adobeacrobatMatch9.4.1

adobeacrobatMatch9.4.2

adobeacrobatMatch9.4.3

adobeacrobatMatch9.4.4

adobeacrobatMatch10.0

adobeacrobatMatch10.0.1

adobeacrobatMatch10.0.2

adobeacrobat_readerRange≤10.0.3

adobeacrobat_readerMatch9.0

adobeacrobat_readerMatch9.1

adobeacrobat_readerMatch9.1.1

adobeacrobat_readerMatch9.1.2

adobeacrobat_readerMatch9.1.3

adobeacrobat_readerMatch9.2

adobeacrobat_readerMatch9.3

adobeacrobat_readerMatch9.3.1

adobeacrobat_readerMatch9.3.2

adobeacrobat_readerMatch9.3.3

adobeacrobat_readerMatch9.3.4

adobeacrobat_readerMatch9.4

adobeacrobat_readerMatch9.4.1

adobeacrobat_readerMatch9.4.2

adobeacrobat_readerMatch9.4.3

adobeacrobat_readerMatch9.4.4

adobeacrobat_readerMatch10.0

adobeacrobat_readerMatch10.0.1

adobeacrobat_readerMatch10.0.2

AND

applemac_os_x

microsoftwindows

References

googlechromereleases.blogspot.com/2011/06/stable-channel-update.html

secunia.com/advisories/44846

secunia.com/advisories/44847

secunia.com/advisories/44871

secunia.com/advisories/44872

secunia.com/advisories/44946

secunia.com/advisories/48308

www.adobe.com/support/security/bulletins/apsb11-13.html

www.blackberry.com/btsc/KB27240

www.redhat.com/support/errata/RHSA-2011-0850.html

www.securityfocus.com/bid/48107

www.securitytracker.com/id?1025603

www.securitytracker.com/id?1025658

exchange.xforce.ibmcloud.com/vulnerabilities/67838

hermes.opensuse.org/messages/8704566

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13762

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

7.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.3%

JSON

Related for NVD:CVE-2011-2107

cve1 nessus11 suse1 openvas7 cvelist1 seebug1 threatpost1 prion1 freebsd1 redhat2 checkpoint_advisories1 ubuntucve1 gentoo1