CVE-2011-2107observed exploitation

CVE-2011-2107

Published · Updated

25Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Attendepss 3.6%
from disclosure to weapon
Published on NVDJun 7
VulnCheckJun 6
exploitation probability
3.6%top 11% of all CVEs
observed exploitation
yesVulnCheck
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."
Affected products
n/a · n/a
References
http://googlechromereleases.blogspot.com/2011/06/stable-channel-update.htmlhttp://secunia.com/advisories/44846http://secunia.com/advisories/44847http://secunia.com/advisories/44871http://secunia.com/advisories/44872http://secunia.com/advisories/44946http://secunia.com/advisories/48308https://exchange.xforce.ibmcloud.com/vulnerabilities/67838https://hermes.opensuse.org/messages/8704566https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13762http://www.adobe.com/support/security/bulletins/apsb11-13.htmlhttp://www.blackberry.com/btsc/KB27240