Back to KEVs

CVE-2011-2444

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7...

Basic Information

CVE State
PUBLISHED
Reserved Date
June 06, 2011
Published Date
September 22, 2011
Last Updated
August 06, 2024
Vendor
Adobe
Product
Flash Player
Description
Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to a "universal cross-site scripting issue," as exploited in the wild in September 2011.
Tags
windows linux macos android

CVSS Scores

CVSS v2.0

4.3

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploit Status

Exploited in the Wild
Yes (2011-09-22 01:00:00 UTC) Source

References

http://secunia.com/advisories/48308 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15272 http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00025.html http://www.redhat.com/support/errata/RHSA-2011-1333.html http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_20.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14050 http://www.adobe.com/support/security/bulletins/apsb11-26.html

Known Exploited Vulnerability Information

Source Added Date
CVE 2011-09-22 01:00:00 UTC

Timeline

  • CVE ID Reserved

  • CVE Published to Public

  • Added to KEVIntel