FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2011-2107

This CVE name corresponds to:

Entered	Topic
2011-06-08	linux-flashplugin -- cross-site scripting vulnerability

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2011-2107 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2011-2107
Phase	Assigned(20110513)

Description

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."

References

Source	Reference
CONFIRM	http://www.adobe.com/support/security/bulletins/apsb11-13.html
CONFIRM	http://googlechromereleases.blogspot.com/2011/06/stable-channel-update.html
CONFIRM	http://www.blackberry.com/btsc/KB27240
REDHAT	RHSA-2011:0850
SUSE	openSUSE-SU-2011:0612
BID	48107
OVAL	oval:org.mitre.oval:def:13762
SECTRACK	1025603
SECTRACK	1025658
SECUNIA	44846
SECUNIA	44847
SECUNIA	44872
SECUNIA	44871
SECUNIA	44946
XF	flash-player-unspecified-xss(67838)