CVE-2011-2107

EXPLOITED

Adobe Flash Player <10.3.181.22-10.3.185.22 - XSS

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2011-2107 has been observed exploited in the wild (reported by VulnCheck KEV).

Description

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."

References (16)

Core 16
Core References
Various Sources x_refsource_confirm
http://www.blackberry.com/btsc/KB27240
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48308
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44846
Release Notes, Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2011/06/stable-channel-update.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44872
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/48107
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44847
Patch, Vendor Advisory x_refsource_confirm
http://www.adobe.com/support/security/bulletins/apsb11-13.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44871
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2011-0850.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/67838
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44946
Various Sources vendor-advisory x_refsource_suse
https://hermes.opensuse.org/messages/8704566
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1025658
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13762
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1025603

Scores

EPSS 0.0355
EPSS Percentile 88.0%

Details

VulnCheck KEV 2011-06-06
CWE
CWE-79
Status published
Products (50)
adobe/acrobat 9.0
adobe/acrobat 9.1
adobe/acrobat 9.1.1
adobe/acrobat 9.1.2
adobe/acrobat 9.1.3
adobe/acrobat 9.2
adobe/acrobat 9.3
adobe/acrobat 9.3.1
adobe/acrobat 9.3.2
adobe/acrobat 9.3.3
... and 40 more
Published Jun 09, 2011
Tracked Since Feb 18, 2026