CVE-2011-2107

Sažetak

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."

Reference

http://googlechromereleases.blogspot.com/2011/06/stable-channel-update.html
http://secunia.com/advisories/44846
http://secunia.com/advisories/44847
http://secunia.com/advisories/44871
http://secunia.com/advisories/44872
http://secunia.com/advisories/44946
http://secunia.com/advisories/48308
http://www.adobe.com/support/security/bulletins/apsb11-13.html
http://www.blackberry.com/btsc/KB27240
http://www.redhat.com/support/errata/RHSA-2011-0850.html
http://www.securityfocus.com/bid/48107
http://www.securitytracker.com/id?1025603
http://www.securitytracker.com/id?1025658
https://exchange.xforce.ibmcloud.com/vulnerabilities/67838
https://hermes.opensuse.org/messages/8704566
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13762

CVSS

Base:	4.3
Impact:	2.9
Exploitability:	8.6

Pristup

Vektor	Složenost	Autentikacija
NETWORK	MEDIUM	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
NONE	PARTIAL	NONE

CVSS vektor

AV:N/AC:M/Au:N/C:N/I:P/A:N

Zadnje važnije ažuriranje

30-10-2018 - 16:26

Objavljeno

09-06-2011 - 02:38