CVE-2011-2444

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to a "universal cross-site scripting issue," as exploited in the wild in September 2011.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.14.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.19.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.24.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.53.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.60.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.61.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.66.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.67.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.68.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.0.73.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.155.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.262.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.277.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.0.283.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.0.42.34:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.0.45.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.52.14.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.52.15:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.53.64:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.82.76:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.85.3:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.92.8:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.92.10:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.95.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.95.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.102.64:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.2.152:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.2.152.32:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.2.152.33:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.2.154.13:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.2.154.25:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.2.159.1:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.3.181.14:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.3.181.16:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.3.181.23:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.3.181.34:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.3.181.36:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.3.183.5:*:*:*:*:*:*:*
OR cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.92.8:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.92.10:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.95.2:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.105.6:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.1.106.16:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.2.156.12:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.2.157.51:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.3.185.21:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.3.185.23:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.3.185.25:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:10.3.186.3:*:*:*:*:*:*:*
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:28

Type Values Removed Values Added
References () http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_20.html - () http://googlechromereleases.blogspot.com/2011/09/stable-channel-update_20.html -
References () http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00025.html - () http://lists.opensuse.org/opensuse-security-announce/2011-09/msg00025.html -
References () http://secunia.com/advisories/48308 - () http://secunia.com/advisories/48308 -
References () http://www.adobe.com/support/security/bulletins/apsb11-26.html - Patch, Vendor Advisory () http://www.adobe.com/support/security/bulletins/apsb11-26.html - Patch, Vendor Advisory
References () http://www.redhat.com/support/errata/RHSA-2011-1333.html - () http://www.redhat.com/support/errata/RHSA-2011-1333.html -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14050 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14050 -
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15272 - () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15272 -

Information

Published : 2011-09-22 03:38

Updated : 2024-11-21 01:28


NVD link : CVE-2011-2444

Mitre link : CVE-2011-2444

CVE.ORG link : CVE-2011-2444


JSON object : View

Products Affected

sun

  • sunos

linux

  • linux_kernel

google

  • android

apple

  • mac_os_x

adobe

  • flash_player

microsoft

  • windows
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')