CVE-2011-2458

2011-11-1100:00:00

ubuntu.com

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.012 Low

EPSS

Percentile

85.5%

JSON

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on
Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android,
and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows
remote attackers to bypass the cross-domain policy via a crafted web site.

Notes

Author	Note
mdeslaur	IE only? who knows?

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchadobe-flashplugin< 11.1.102.55-0lucid1UNKNOWN
ubuntu10.10noarchadobe-flashplugin< 11.1.102.55-0maverick1UNKNOWN
ubuntu11.04noarchadobe-flashplugin< 11.1.102.55-0natty1UNKNOWN
ubuntu11.10noarchadobe-flashplugin< 11.1.102.55-0oneiric1UNKNOWN
ubuntu10.04noarchflashplugin-nonfree< 11.1.102.55ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchflashplugin-nonfree< 11.1.102.55ubuntu0.10.10.1UNKNOWN
ubuntu11.04noarchflashplugin-nonfree< 11.1.102.55ubuntu0.11.04.1UNKNOWN
ubuntu11.10noarchflashplugin-nonfree< 11.1.102.55ubuntu0.11.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	10.04	noarch	adobe-flashplugin	< 11.1.102.55-0lucid1	UNKNOWN
ubuntu	10.10	noarch	adobe-flashplugin	< 11.1.102.55-0maverick1	UNKNOWN
ubuntu	11.04	noarch	adobe-flashplugin	< 11.1.102.55-0natty1	UNKNOWN
ubuntu	11.10	noarch	adobe-flashplugin	< 11.1.102.55-0oneiric1	UNKNOWN
ubuntu	10.04	noarch	flashplugin-nonfree	< 11.1.102.55ubuntu0.10.04.1	UNKNOWN
ubuntu	10.10	noarch	flashplugin-nonfree	< 11.1.102.55ubuntu0.10.10.1	UNKNOWN
ubuntu	11.04	noarch	flashplugin-nonfree	< 11.1.102.55ubuntu0.11.04.1	UNKNOWN
ubuntu	11.10	noarch	flashplugin-nonfree	< 11.1.102.55ubuntu0.11.10.1	UNKNOWN