NetSight
IP …
medium4.3

CVE-2011-2107

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Andr…

Impact

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."

Affected products

VendorProductAffected versions
AdobeFlash Player
through 10.3.181.16
Versions 6.0.21.0, 6.0.79, 7.0, 7.0.1, 7.0.14.0
AdobeAcrobat
through 10.0.3
Versions 9.0, 9.1, 9.1.1, 9.1.2, 9.1.3
AdobeAcrobat Reader
through 10.0.3
Versions 9.0, 9.1, 9.1.1, 9.1.2, 9.1.3

Weakness classification

CWE-79

References