CVE-2011-2458
First published: Fri Nov 11 2011(Updated: )
Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Adobe Air | >=3.0<3.1.0.4880 | |
| Adobe Flash Player | >=10.0<10.3.183.11 | |
| Adobe Flash Player | >=11.0<11.1.102.55 | |
| Apple Mac OS X | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Sun Solaris | ||
| Adobe Flash Player | >=11.0<11.1.102.59 | |
| Google Android |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.adobe.com/support/security/bulletins/apsb11-28.html
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html
- http://security.gentoo.org/glsa/glsa-201204-07.xml
- http://secunia.com/advisories/48819
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16179
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14014
- collector/nvd-historical
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/adobe
- canonical/adobe adobe air
- version/adobe adobe air/3.0
- canonical/adobe flash player
- version/adobe flash player/10.0
- version/adobe flash player/11.0
- vendor/apple
- canonical/apple mac os x
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/sun
- canonical/sun solaris
- vendor/google
- canonical/google android