CVE-2011-2458

EUVD-2011-2447
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 76%
Affected Products (NVD)
VendorProductVersion
adobeflash_player
10.0 ≤
𝑥
< 10.3.183.11
adobeflash_player
11.0 ≤
𝑥
< 11.1.102.55
adobeflash_player
11.0 ≤
𝑥
< 11.1.102.59
adobeadobe_air
3.0 ≤
𝑥
< 3.1.0.4880
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
adobe-flashplugin
hardy
ignored
lucid
Fixed 11.1.102.55-0lucid1
released
maverick
Fixed 11.1.102.55-0maverick1
released
natty
Fixed 11.1.102.55-0natty1
released
oneiric
Fixed 11.1.102.55-0oneiric1
released
flashplugin-nonfree
hardy
ignored
lucid
Fixed 11.1.102.55ubuntu0.10.04.1
released
maverick
Fixed 11.1.102.55ubuntu0.10.10.1
released
natty
Fixed 11.1.102.55ubuntu0.11.04.1
released
oneiric
Fixed 11.1.102.55ubuntu0.11.10.1
released
Common Weakness Enumeration