Vulnerability in Adobe Air
CVE-2011-2139
Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecified vectors.
EPSS: 0.054 (91.9th percentile) — read the EPSS interpretation.
Affected products
- Adobe Adobe_air — versions 1.0, 1.1, 1.5
- Adobe Flash_player — versions 6.0.21.0, 6.0.79, 7.0
- Apple Mac_os_x
- Google Android
- Linux Linux_kernel
- Microsoft Windows
- Sun Sunos
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@adobe.com (vendor-advisory, x_refsource_SUSE)
- psirt@adobe.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@adobe.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- psirt@adobe.com (signature, x_refsource_OVAL, vdb-entry)
- psirt@adobe.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
- psirt@adobe.com (vendor-advisory, x_refsource_SUSE)
- psirt@adobe.com (x_refsource_REDHAT, vendor-advisory)
- psirt@adobe.com (signature, x_refsource_OVAL, vdb-entry)
- psirt@adobe.com (vendor-advisory, x_refsource_SUSE)