Adobe Flash Player URI Protocol Cross Site Scripting (ASBP11-26; CVE-2011-2429)

A cross-site scripting vulnerability has been reported in Adobe Flash Player. The vulnerability is due to differences in the way the browser and the plug-in handle URLs. A remote attacker may exploit this vulnerability by enticing an affected user to open a malicious web-page...