Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.
References
Link | Resource |
---|---|
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html | Mailing List Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html | Mailing List Third Party Advisory |
http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html | Mailing List Third Party Advisory |
http://secunia.com/advisories/48819 | Third Party Advisory |
http://security.gentoo.org/glsa/glsa-201204-07.xml | Third Party Advisory |
http://www.adobe.com/support/security/bulletins/apsb11-28.html | Patch Vendor Advisory |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14014 | Third Party Advisory |
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16179 | Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2011-11-11 16:55
Updated : 2024-02-28 11:41
NVD link : CVE-2011-2458
Mitre link : CVE-2011-2458
CVE.ORG link : CVE-2011-2458
JSON object : View
Products Affected
- android
microsoft
- windows
adobe
- adobe_air
- flash_player
apple
- mac_os_x
linux
- linux_kernel
sun
- solaris
CWE
CWE-264
Permissions, Privileges, and Access Controls