CVE-2011-2458

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 77%
Affected Products (NVD)
VendorProductVersion
adobeflash_player
10.0 ≤
𝑥
< 10.3.183.11
adobeflash_player
11.0 ≤
𝑥
< 11.1.102.55
adobeflash_player
11.0 ≤
𝑥
< 11.1.102.59
adobeadobe_air
3.0 ≤
𝑥
< 3.1.0.4880
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
adobe-flashplugin
hardy
ignored
lucid
Fixed 11.1.102.55-0lucid1
released
maverick
Fixed 11.1.102.55-0maverick1
released
natty
Fixed 11.1.102.55-0natty1
released
oneiric
Fixed 11.1.102.55-0oneiric1
released
flashplugin-nonfree
hardy
ignored
lucid
Fixed 11.1.102.55ubuntu0.10.04.1
released
maverick
Fixed 11.1.102.55ubuntu0.10.10.1
released
natty
Fixed 11.1.102.55ubuntu0.11.04.1
released
oneiric
Fixed 11.1.102.55ubuntu0.11.10.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
flash-player
suse enterprise desktop 12
11.2.202.406-1.3
fixed
suse enterprise desktop 12 SP1
11.2.202.548-111.1
fixed
suse enterprise sap 12
11.2.202.406-1.3
fixed
suse enterprise sap 12 SP1
11.2.202.548-111.1
fixed
suse enterprise server 12
11.2.202.406-1.3
fixed
suse enterprise server 12 SP1
11.2.202.548-111.1
fixed
suse enterprise workstation 12
11.2.202.406-1.3
fixed
suse enterprise workstation 12 SP1
11.2.202.548-111.1
fixed
flash-player-gnome
suse enterprise desktop 12
11.2.202.406-1.3
fixed
suse enterprise desktop 12 SP1
11.2.202.548-111.1
fixed
suse enterprise sap 12
11.2.202.406-1.3
fixed
suse enterprise sap 12 SP1
11.2.202.548-111.1
fixed
suse enterprise server 12
11.2.202.406-1.3
fixed
suse enterprise server 12 SP1
11.2.202.548-111.1
fixed
suse enterprise workstation 12
11.2.202.406-1.3
fixed
suse enterprise workstation 12 SP1
11.2.202.548-111.1
fixed
Common Weakness Enumeration