CVE-2011-2107: XSS
First published: Tue Jun 07 2011(Updated: )
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Macromedia Flash Player | <=10.3.181.16 | |
| Macromedia Flash Player | =6.0.21.0 | |
| Macromedia Flash Player | =6.0.79 | |
| Macromedia Flash Player | =7.0 | |
| Macromedia Flash Player | =7.0.1 | |
| Macromedia Flash Player | =7.0.14.0 | |
| Macromedia Flash Player | =7.0.19.0 | |
| Macromedia Flash Player | =7.0.24.0 | |
| Macromedia Flash Player | =7.0.25 | |
| Macromedia Flash Player | =7.0.53.0 | |
| Macromedia Flash Player | =7.0.60.0 | |
| Macromedia Flash Player | =7.0.61.0 | |
| Macromedia Flash Player | =7.0.63 | |
| Macromedia Flash Player | =7.0.66.0 | |
| Macromedia Flash Player | =7.0.67.0 | |
| Macromedia Flash Player | =7.0.68.0 | |
| Macromedia Flash Player | =7.0.69.0 | |
| Macromedia Flash Player | =7.0.70.0 | |
| Macromedia Flash Player | =7.0.73.0 | |
| Macromedia Flash Player | =7.1 | |
| Macromedia Flash Player | =7.1.1 | |
| Macromedia Flash Player | =7.2 | |
| Macromedia Flash Player | =8.0 | |
| Macromedia Flash Player | =8.0.22.0 | |
| Macromedia Flash Player | =8.0.24.0 | |
| Macromedia Flash Player | =8.0.33.0 | |
| Macromedia Flash Player | =8.0.34.0 | |
| Macromedia Flash Player | =8.0.35.0 | |
| Macromedia Flash Player | =8.0.39.0 | |
| Macromedia Flash Player | =8.0.42.0 | |
| Macromedia Flash Player | =9.0 | |
| Macromedia Flash Player | =9.0.16 | |
| Macromedia Flash Player | =9.0.18d60 | |
| Macromedia Flash Player | =9.0.20 | |
| Macromedia Flash Player | =9.0.20.0 | |
| Macromedia Flash Player | =9.0.28 | |
| Macromedia Flash Player | =9.0.28.0 | |
| Macromedia Flash Player | =9.0.31 | |
| Macromedia Flash Player | =9.0.31.0 | |
| Macromedia Flash Player | =9.0.45.0 | |
| Macromedia Flash Player | =9.0.47.0 | |
| Macromedia Flash Player | =9.0.48.0 | |
| Macromedia Flash Player | =9.0.112.0 | |
| Macromedia Flash Player | =9.0.114.0 | |
| Macromedia Flash Player | =9.0.115.0 | |
| Macromedia Flash Player | =9.0.124.0 | |
| Macromedia Flash Player | =9.0.125.0 | |
| Macromedia Flash Player | =9.0.151.0 | |
| Macromedia Flash Player | =9.0.152.0 | |
| Macromedia Flash Player | =9.0.155.0 | |
| Macromedia Flash Player | =9.0.159.0 | |
| Macromedia Flash Player | =9.0.246.0 | |
| Macromedia Flash Player | =9.0.260.0 | |
| Macromedia Flash Player | =9.0.262.0 | |
| Macromedia Flash Player | =9.0.277.0 | |
| Macromedia Flash Player | =9.0.283.0 | |
| Macromedia Flash Player | =9.125.0 | |
| Macromedia Flash Player | =10.0.0.584 | |
| Macromedia Flash Player | =10.0.12.10 | |
| Macromedia Flash Player | =10.0.12.36 | |
| Macromedia Flash Player | =10.0.15.3 | |
| Macromedia Flash Player | =10.0.22.87 | |
| Macromedia Flash Player | =10.0.32.18 | |
| Macromedia Flash Player | =10.0.42.34 | |
| Macromedia Flash Player | =10.0.45.2 | |
| Macromedia Flash Player | =10.1.52.14.1 | |
| Macromedia Flash Player | =10.1.52.15 | |
| Macromedia Flash Player | =10.1.53.64 | |
| Macromedia Flash Player | =10.1.82.76 | |
| Macromedia Flash Player | =10.1.85.3 | |
| Macromedia Flash Player | =10.1.92.8 | |
| Macromedia Flash Player | =10.1.92.10 | |
| Macromedia Flash Player | =10.1.95.1 | |
| Macromedia Flash Player | =10.1.95.2 | |
| Macromedia Flash Player | =10.1.102.64 | |
| Macromedia Flash Player | =10.2.152 | |
| Macromedia Flash Player | =10.2.152.32 | |
| Macromedia Flash Player | =10.2.152.33 | |
| Macromedia Flash Player | =10.2.153.1 | |
| Macromedia Flash Player | =10.2.154.13 | |
| Macromedia Flash Player | =10.2.154.25 | |
| Macromedia Flash Player | =10.2.159.1 | |
| Macromedia Flash Player | =10.3.181.14 | |
| Apple iOS and macOS | ||
| Linux Kernel | =2.6.0 | |
| Microsoft Windows Operating System | ||
| SunOS | ||
| Macromedia Flash Player | <=10.3.185.22 | |
| Macromedia Flash Player | =10.1.105.6 | |
| Macromedia Flash Player | =10.1.106.16 | |
| Macromedia Flash Player | =10.2.156.12 | |
| Macromedia Flash Player | =10.2.157.51 | |
| Android | ||
| Adobe Acrobat Reader | <=10.0.3 | |
| Adobe Acrobat Reader | =9.0 | |
| Adobe Acrobat Reader | =9.1 | |
| Adobe Acrobat Reader | =9.1.1 | |
| Adobe Acrobat Reader | =9.1.2 | |
| Adobe Acrobat Reader | =9.1.3 | |
| Adobe Acrobat Reader | =9.2 | |
| Adobe Acrobat Reader | =9.3 | |
| Adobe Acrobat Reader | =9.3.1 | |
| Adobe Acrobat Reader | =9.3.2 | |
| Adobe Acrobat Reader | =9.3.3 | |
| Adobe Acrobat Reader | =9.3.4 | |
| Adobe Acrobat Reader | =9.4 | |
| Adobe Acrobat Reader | =9.4.1 | |
| Adobe Acrobat Reader | =9.4.2 | |
| Adobe Acrobat Reader | =9.4.3 | |
| Adobe Acrobat Reader | =9.4.4 | |
| Adobe Acrobat Reader | =10.0 | |
| Adobe Acrobat Reader | =10.0.1 | |
| Adobe Acrobat Reader | =10.0.2 | |
| Adobe Acrobat Reader Notification Manager | <=10.0.3 | |
| Adobe Acrobat Reader Notification Manager | =9.0 | |
| Adobe Acrobat Reader Notification Manager | =9.1 | |
| Adobe Acrobat Reader Notification Manager | =9.1.1 | |
| Adobe Acrobat Reader Notification Manager | =9.1.2 | |
| Adobe Acrobat Reader Notification Manager | =9.1.3 | |
| Adobe Acrobat Reader Notification Manager | =9.2 | |
| Adobe Acrobat Reader Notification Manager | =9.3 | |
| Adobe Acrobat Reader Notification Manager | =9.3.1 | |
| Adobe Acrobat Reader Notification Manager | =9.3.2 | |
| Adobe Acrobat Reader Notification Manager | =9.3.3 | |
| Adobe Acrobat Reader Notification Manager | =9.3.4 | |
| Adobe Acrobat Reader Notification Manager | =9.4 | |
| Adobe Acrobat Reader Notification Manager | =9.4.1 | |
| Adobe Acrobat Reader Notification Manager | =9.4.2 | |
| Adobe Acrobat Reader Notification Manager | =9.4.3 | |
| Adobe Acrobat Reader Notification Manager | =9.4.4 | |
| Adobe Acrobat Reader Notification Manager | =10.0 | |
| Adobe Acrobat Reader Notification Manager | =10.0.1 | |
| Adobe Acrobat Reader Notification Manager | =10.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.adobe.com/support/security/bulletins/apsb11-13.html
- http://googlechromereleases.blogspot.com/2011/06/stable-channel-update.html
- http://secunia.com/advisories/44846
- http://www.redhat.com/support/errata/RHSA-2011-0850.html
- http://www.securitytracker.com/id?1025603
- http://secunia.com/advisories/44847
- http://secunia.com/advisories/44872
- http://www.securityfocus.com/bid/48107
- https://hermes.opensuse.org/messages/8704566
- http://www.securitytracker.com/id?1025658
- http://secunia.com/advisories/44871
- http://www.blackberry.com/btsc/KB27240
- http://secunia.com/advisories/44946
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67838
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13762
- http://secunia.com/advisories/48308
Frequently Asked Questions
What is the severity of CVE-2011-2107?
CVE-2011-2107 has a high severity rating due to its potential for exploitation via cross-site scripting attacks.
How do I fix CVE-2011-2107?
To fix CVE-2011-2107, users should update Adobe Flash Player to version 10.3.181.22 or later.
Which versions of Adobe Flash Player are affected by CVE-2011-2107?
CVE-2011-2107 affects Adobe Flash Player versions prior to 10.3.181.22 on all platforms.
What types of vulnerabilities does CVE-2011-2107 exploit?
CVE-2011-2107 exploits a cross-site scripting (XSS) vulnerability allowing attackers to inject arbitrary web scripts.
Who is affected by CVE-2011-2107?
Anyone using older versions of Adobe Flash Player before 10.3.181.22 on Windows, macOS, Linux, Solaris, or Android is affected by CVE-2011-2107.
- collector/nvd-historical
- agent/references
- agent/type
- agent/author
- agent/weakness
- agent/severity
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/adobe
- canonical/macromedia flash player
- version/macromedia flash player/10.3.181.16
- version/macromedia flash player/6.0.21.0
- version/macromedia flash player/6.0.79
- version/macromedia flash player/7.0
- version/macromedia flash player/7.0.1
- version/macromedia flash player/7.0.14.0
- version/macromedia flash player/7.0.19.0
- version/macromedia flash player/7.0.24.0
- version/macromedia flash player/7.0.25
- version/macromedia flash player/7.0.53.0
- version/macromedia flash player/7.0.60.0
- version/macromedia flash player/7.0.61.0
- version/macromedia flash player/7.0.63
- version/macromedia flash player/7.0.66.0
- version/macromedia flash player/7.0.67.0
- version/macromedia flash player/7.0.68.0
- version/macromedia flash player/7.0.69.0
- version/macromedia flash player/7.0.70.0
- version/macromedia flash player/7.0.73.0
- version/macromedia flash player/7.1
- version/macromedia flash player/7.1.1
- version/macromedia flash player/7.2
- version/macromedia flash player/8.0
- version/macromedia flash player/8.0.22.0
- version/macromedia flash player/8.0.24.0
- version/macromedia flash player/8.0.33.0
- version/macromedia flash player/8.0.34.0
- version/macromedia flash player/8.0.35.0
- version/macromedia flash player/8.0.39.0
- version/macromedia flash player/8.0.42.0
- version/macromedia flash player/9.0
- version/macromedia flash player/9.0.16
- version/macromedia flash player/9.0.18d60
- version/macromedia flash player/9.0.20
- version/macromedia flash player/9.0.20.0
- version/macromedia flash player/9.0.28
- version/macromedia flash player/9.0.28.0
- version/macromedia flash player/9.0.31
- version/macromedia flash player/9.0.31.0
- version/macromedia flash player/9.0.45.0
- version/macromedia flash player/9.0.47.0
- version/macromedia flash player/9.0.48.0
- version/macromedia flash player/9.0.112.0
- version/macromedia flash player/9.0.114.0
- version/macromedia flash player/9.0.115.0
- version/macromedia flash player/9.0.124.0
- version/macromedia flash player/9.0.125.0
- version/macromedia flash player/9.0.151.0
- version/macromedia flash player/9.0.152.0
- version/macromedia flash player/9.0.155.0
- version/macromedia flash player/9.0.159.0
- version/macromedia flash player/9.0.246.0
- version/macromedia flash player/9.0.260.0
- version/macromedia flash player/9.0.262.0
- version/macromedia flash player/9.0.277.0
- version/macromedia flash player/9.0.283.0
- version/macromedia flash player/9.125.0
- version/macromedia flash player/10.0.0.584
- version/macromedia flash player/10.0.12.10
- version/macromedia flash player/10.0.12.36
- version/macromedia flash player/10.0.15.3
- version/macromedia flash player/10.0.22.87
- version/macromedia flash player/10.0.32.18
- version/macromedia flash player/10.0.42.34
- version/macromedia flash player/10.0.45.2
- version/macromedia flash player/10.1.52.14.1
- version/macromedia flash player/10.1.52.15
- version/macromedia flash player/10.1.53.64
- version/macromedia flash player/10.1.82.76
- version/macromedia flash player/10.1.85.3
- version/macromedia flash player/10.1.92.8
- version/macromedia flash player/10.1.92.10
- version/macromedia flash player/10.1.95.1
- version/macromedia flash player/10.1.95.2
- version/macromedia flash player/10.1.102.64
- version/macromedia flash player/10.2.152
- version/macromedia flash player/10.2.152.32
- version/macromedia flash player/10.2.152.33
- version/macromedia flash player/10.2.153.1
- version/macromedia flash player/10.2.154.13
- version/macromedia flash player/10.2.154.25
- version/macromedia flash player/10.2.159.1
- version/macromedia flash player/10.3.181.14
- vendor/apple
- canonical/apple ios and macos
- vendor/linux
- canonical/linux kernel
- version/linux kernel/2.6.0
- vendor/microsoft
- canonical/microsoft windows operating system
- vendor/sun
- canonical/sunos
- version/macromedia flash player/10.3.185.22
- version/macromedia flash player/10.1.105.6
- version/macromedia flash player/10.1.106.16
- version/macromedia flash player/10.2.156.12
- version/macromedia flash player/10.2.157.51
- vendor/google
- canonical/android
- canonical/adobe acrobat reader
- version/adobe acrobat reader/10.0.3
- version/adobe acrobat reader/9.0
- version/adobe acrobat reader/9.1
- version/adobe acrobat reader/9.1.1
- version/adobe acrobat reader/9.1.2
- version/adobe acrobat reader/9.1.3
- version/adobe acrobat reader/9.2
- version/adobe acrobat reader/9.3
- version/adobe acrobat reader/9.3.1
- version/adobe acrobat reader/9.3.2
- version/adobe acrobat reader/9.3.3
- version/adobe acrobat reader/9.3.4
- version/adobe acrobat reader/9.4
- version/adobe acrobat reader/9.4.1
- version/adobe acrobat reader/9.4.2
- version/adobe acrobat reader/9.4.3
- version/adobe acrobat reader/9.4.4
- version/adobe acrobat reader/10.0
- version/adobe acrobat reader/10.0.1
- version/adobe acrobat reader/10.0.2
- canonical/adobe acrobat reader notification manager
- version/adobe acrobat reader notification manager/10.0.3
- version/adobe acrobat reader notification manager/9.0
- version/adobe acrobat reader notification manager/9.1
- version/adobe acrobat reader notification manager/9.1.1
- version/adobe acrobat reader notification manager/9.1.2
- version/adobe acrobat reader notification manager/9.1.3
- version/adobe acrobat reader notification manager/9.2
- version/adobe acrobat reader notification manager/9.3
- version/adobe acrobat reader notification manager/9.3.1
- version/adobe acrobat reader notification manager/9.3.2
- version/adobe acrobat reader notification manager/9.3.3
- version/adobe acrobat reader notification manager/9.3.4
- version/adobe acrobat reader notification manager/9.4
- version/adobe acrobat reader notification manager/9.4.1
- version/adobe acrobat reader notification manager/9.4.2
- version/adobe acrobat reader notification manager/9.4.3
- version/adobe acrobat reader notification manager/9.4.4
- version/adobe acrobat reader notification manager/10.0
- version/adobe acrobat reader notification manager/10.0.1
- version/adobe acrobat reader notification manager/10.0.2