Adobe Flash Player CVE-2011-2444 Cross Site Scripting Vulnerability
BID:49710
Info
Adobe Flash Player CVE-2011-2444 Cross Site Scripting Vulnerability
| Bugtraq ID: | 49710 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-2444 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 20 2011 12:00AM |
| Updated: | Jun 20 2013 09:38AM |
| Credit: | |
| Vulnerable: |
Xerox FreeFlow Print Server (FFPS) 73.C0.41 Xerox FreeFlow Print Server (FFPS) 73.B3.61 SuSE Suse Linux Enterprise Desktop 11 SP1 SuSE Suse Linux Enterprise Desktop 10 SP4 Sun Solaris 11 Express Sun Solaris 10_x86 Sun Solaris 10_sparc Sun Solaris 10 Express Rim Blackberry PlayBook Tablet Software 1.0.7.2942 Rim Blackberry PlayBook Tablet Software 1.0.6 Rim Blackberry PlayBook Tablet Software 1.0.5.2342 Rim Blackberry PlayBook Tablet Software 1.0.5.2304 Redhat Enterprise Linux WS Extras 4 Redhat Enterprise Linux Workstation Supplementary 6 Redhat Enterprise Linux Supplementary 5 server Redhat Enterprise Linux Server Supplementary 6 Redhat Enterprise Linux Extras 4 Redhat Enterprise Linux ES Extras 4 Redhat Enterprise Linux Desktop Supplementary 6 Redhat Enterprise Linux Desktop Supplementary 5 client Redhat Enterprise Linux AS Extras 4 Redhat Desktop Extras 4 HP Systems Insight Manager 6.3 HP Systems Insight Manager 6.2 HP Systems Insight Manager 6.1 HP Systems Insight Manager 6.0.0.96 HP Systems Insight Manager 6.0 HP Systems Insight Manager 5.3 Update 1 HP Systems Insight Manager 5.3 HP Systems Insight Manager 5.2 SP2 HP Systems Insight Manager 5.1 SP1 HP Systems Insight Manager 5.0 SP6 HP Systems Insight Manager 5.0 SP5 HP Systems Insight Manager 5.0 SP3 HP Systems Insight Manager 5.0 SP2 HP Systems Insight Manager 5.0 SP1 HP Systems Insight Manager 5.0 HP Systems Insight Manager 4.2 SP2 HP Systems Insight Manager 4.2 SP1 HP Systems Insight Manager 4.2 Google Chrome 9.0.597.94 Google Chrome 9.0.597.84 Google Chrome 9.0.597.107 Google Chrome 8.0.552.344 Google Chrome 8.0.552.310 Google Chrome 8.0.552.309 Google Chrome 8.0.552.308 Google Chrome 8.0.552.307 Google Chrome 8.0.552.306 Google Chrome 8.0.552.305 Google Chrome 8.0.552.304 Google Chrome 8.0.552.303 Google Chrome 8.0.552.302 Google Chrome 8.0.552.301 Google Chrome 8.0.552.300 Google Chrome 8.0.552.237 Google Chrome 8.0.552.226 Google Chrome 8.0.552.225 Google Chrome 8.0.552.224 Google Chrome 8.0.552.223 Google Chrome 8.0.552.222 Google Chrome 8.0.552.221 Google Chrome 8.0.552.220 Google Chrome 8.0.552.219 Google Chrome 8.0.552.218 Google Chrome 8.0.552.217 Google Chrome 8.0.552.216 Google Chrome 8.0.552.215 Google Chrome 8.0.552.215 Google Chrome 8.0.552.214 Google Chrome 8.0.552.213 Google Chrome 8.0.552.212 Google Chrome 8.0.552.211 Google Chrome 8.0.552.210 Google Chrome 8.0.552.21 Google Chrome 8.0.552.209 Google Chrome 8.0.552.208 Google Chrome 8.0.552.207 Google Chrome 8.0.552.206 Google Chrome 8.0.552.205 Google Chrome 8.0.552.204 Google Chrome 8.0.552.203 Google Chrome 8.0.552.202 Google Chrome 8.0.552.201 Google Chrome 8.0.552.200 Google Chrome 8.0.552.20 Google Chrome 8.0.552.2 Google Chrome 8.0.552.19 Google Chrome 8.0.552.18 Google Chrome 8.0.552.17 Google Chrome 8.0.552.16 Google Chrome 8.0.552.15 Google Chrome 8.0.552.14 Google Chrome 8.0.552.13 Google Chrome 8.0.552.12 Google Chrome 8.0.552.11 Google Chrome 8.0.552.105 Google Chrome 8.0.552.104 Google Chrome 8.0.552.103 Google Chrome 8.0.552.102 Google Chrome 8.0.552.101 Google Chrome 8.0.552.100 Google Chrome 8.0.552.10 Google Chrome 8.0.552.1 Google Chrome 8.0.552.0 Google Chrome 8.0.551.1 Google Chrome 8.0.551.0 Google Chrome 8.0.550.0 Google Chrome 8.0.549.0 Google Chrome 7.0.548.0 Google Chrome 7.0.547.1 Google Chrome 7.0.547.0 Google Chrome 7.0.544.0 Google Chrome 7.0.542.0 Google Chrome 7.0.541.0 Google Chrome 7.0.540.0 Google Chrome 7.0.539.0 Google Chrome 7.0.538.0 Google Chrome 7.0.537.0 Google Chrome 7.0.536.4 Google Chrome 7.0.536.3 Google Chrome 7.0.536.2 Google Chrome 7.0.536.1 Google Chrome 7.0.536.0 Google Chrome 7.0.535.2 Google Chrome 7.0.535.1 Google Chrome 7.0.531.2 Google Chrome 7.0.531.1 Google Chrome 7.0.531.0 Google Chrome 7.0.530.0 Google Chrome 7.0.529.2 Google Chrome 7.0.529.1 Google Chrome 7.0.529.0 Google Chrome 7.0.528.0 Google Chrome 7.0.526.0 Google Chrome 7.0.525.0 Google Chrome 7.0.524.0 Google Chrome 7.0.522.0 Google Chrome 7.0.521.0 Google Chrome 7.0.520.0 Google Chrome 7.0.519.0 Google Chrome 7.0.518.0 Google Chrome 7.0.517.9 Google Chrome 7.0.517.8 Google Chrome 7.0.517.7 Google Chrome 7.0.517.6 Google Chrome 7.0.517.5 Google Chrome 7.0.517.44 Google Chrome 7.0.517.43 Google Chrome 7.0.517.42 Google Chrome 7.0.517.41 Google Chrome 7.0.517.41 Google Chrome 7.0.517.40 Google Chrome 7.0.517.4 Google Chrome 7.0.517.39 Google Chrome 7.0.517.38 Google Chrome 7.0.517.37 Google Chrome 7.0.517.36 Google Chrome 7.0.517.35 Google Chrome 7.0.517.34 Google Chrome 7.0.517.33 Google Chrome 7.0.517.32 Google Chrome 7.0.517.31 Google Chrome 7.0.517.30 Google Chrome 7.0.517.29 Google Chrome 7.0.517.28 Google Chrome 7.0.517.27 Google Chrome 7.0.517.26 Google Chrome 7.0.517.25 Google Chrome 7.0.517.24 Google Chrome 7.0.517.23 Google Chrome 7.0.517.22 Google Chrome 7.0.517.21 Google Chrome 7.0.517.20 Google Chrome 7.0.517.2 Google Chrome 7.0.517.19 Google Chrome 7.0.517.18 Google Chrome 7.0.517.17 Google Chrome 7.0.517.16 Google Chrome 7.0.517.14 Google Chrome 7.0.517.13 Google Chrome 7.0.517.12 Google Chrome 7.0.517.11 Google Chrome 7.0.517.10 Google Chrome 7.0.517.0 Google Chrome 7.0.516.0 Google Chrome 7.0.515.0 Google Chrome 7.0.514.1 Google Chrome 7.0.514.0 Google Chrome 7.0.513.0 Google Chrome 7.0.512.0 Google Chrome 7.0.511.4 Google Chrome 7.0.511.2 Google Chrome 7.0.511.1 Google Chrome 7.0.510.0 Google Chrome 7.0.509.0 Google Chrome 7.0.507.3 Google Chrome 7.0.507.2 Google Chrome 7.0.507.1 Google Chrome 7.0.507.0 Google Chrome 7.0.506.0 Google Chrome 7.0.505.0 Google Chrome 7.0.504.0 Google Chrome 7.0.503.1 Google Chrome 7.0.503.0 Google Chrome 7.0.500.1 Google Chrome 7.0.500.0 Google Chrome 7.0.499.1 Google Chrome 7.0.499.0 Google Chrome 7.0.498.0 Google Chrome 7.0.497.0 Google Chrome 14.0.835.163 Google Chrome 14 Google Chrome 13.0.782.215 Google Chrome 13.0.782.112 Google Chrome 13.0.782.107 Google Chrome 13 Google Chrome 12.0.742.91 Google Chrome 12.0.742.112 Google Chrome 12.0.742.100 Google Chrome 12 Google Chrome 11.0.696.77 Google Chrome 11.0.696.71 Google Chrome 11.0.696.68 Google Chrome 11.0.696.65 Google Chrome 11.0.696.57 Google Chrome 11.0.696.43 Google Chrome 11.0.696.43 Google Chrome 11.0.672.2 Google Chrome 11 Google Chrome 10.0.648.205 Google Chrome 10.0.648.205 Google Chrome 10.0.648.205 Google Chrome 10.0.648.204 Google Chrome 10.0.648.133 Google Chrome 10.0.648.128 Google Chrome 10.0.648.127 Google Chrome 10.0.648.127 Google Chrome 10 Gentoo Linux Avaya IR 4.0 Adobe Flash Player 10.1.53 .64 Adobe Flash Player 10.1.51 .66 Adobe Flash Player 10.0.45 2 Adobe Flash Player 10.0.45 2 Adobe Flash Player 10.0.45 2 Adobe Flash Player 10.0.32 18 Adobe Flash Player 10.0.22 .87 Adobe Flash Player 10.0.15 .3 Adobe Flash Player 10.0.12 .36 Adobe Flash Player 10.0.12 .35 Adobe Flash Player 9.0.262 Adobe Flash Player 9.0.246 0 Adobe Flash Player 9.0.152 .0 Adobe Flash Player 9.0.151 .0 Adobe Flash Player 9.0.124 .0 Adobe Flash Player 9.0.48.0 Adobe Flash Player 9.0.47.0 Adobe Flash Player 9.0.45.0 Adobe Flash Player 9.0.31.0 Adobe Flash Player 9.0.289.0 Adobe Flash Player 9.0.283.0 Adobe Flash Player 9.0.280 Adobe Flash Player 9.0.28.0 Adobe Flash Player 9.0.277.0 Adobe Flash Player 9.0.262.0 Adobe Flash Player 9.0.260.0 Adobe Flash Player 9.0.246.0 Adobe Flash Player 9.0.159.0 Adobe Flash Player 9.0.155.0 Adobe Flash Player 9.0.115.0 Adobe Flash Player 9 Adobe Flash Player 8.0.35.0 Adobe Flash Player 8.0.34.0 Adobe Flash Player 8 Adobe Flash Player 10.3.186.6 Adobe Flash Player 10.3.186.3 Adobe Flash Player 10.3.186.2 Adobe Flash Player 10.3.185.25 Adobe Flash Player 10.3.185.23 Adobe Flash Player 10.3.185.22 Adobe Flash Player 10.3.185.21 Adobe Flash Player 10.3.183.7 Adobe Flash Player 10.3.183.5 Adobe Flash Player 10.3.183.4 Adobe Flash Player 10.3.181.34 Adobe Flash Player 10.3.181.26 Adobe Flash Player 10.3.181.23 Adobe Flash Player 10.3.181.22 Adobe Flash Player 10.3.181.16 Adobe Flash Player 10.3.181.14 Adobe Flash Player 10.2.159.1 Adobe Flash Player 10.2.157.51 Adobe Flash Player 10.2.156.12 Adobe Flash Player 10.2.154.28 Adobe Flash Player 10.2.154.27 Adobe Flash Player 10.2.154.25 Adobe Flash Player 10.2.154.24 Adobe Flash Player 10.2.154.18 Adobe Flash Player 10.2.154.13 Adobe Flash Player 10.2.153.1 Adobe Flash Player 10.2.152.33 Adobe Flash Player 10.2.152.32 Adobe Flash Player 10.2.152.21 Adobe Flash Player 10.2.152 Adobe Flash Player 10.1.95.2 Adobe Flash Player 10.1.95.1 Adobe Flash Player 10.1.92.8 Adobe Flash Player 10.1.92.10 Adobe Flash Player 10.1.92.10 Adobe Flash Player 10.1.85.3 Adobe Flash Player 10.1.82.76 Adobe Flash Player 10.1.52.15 Adobe Flash Player 10.1.52.14.1 Adobe Flash Player 10.1.106.16 Adobe Flash Player 10.1.105.6 Adobe Flash Player 10.1.102.65 Adobe Flash Player 10.1.102.64 Adobe Flash Player 10.1 Release Candida Adobe Flash Player 10.0.42.34 Adobe Flash Player 10.0.32.18 Adobe Flash Player 10 |
| Not Vulnerable: |
Rim Blackberry PlayBook Tablet Software 1.0.7.3312 HP Systems Insight Manager 7.0 Google Chrome 14.0.835.186 Adobe Flash Player 10.3.186.7 Adobe Flash Player 10.3.183.10 |
Discussion
Adobe Flash Player CVE-2011-2444 Cross Site Scripting Vulnerability
Adobe Flash Player is prone to a cross-site scripting vulnerability.
An attacker can exploit this issue by enticing an unsuspecting victim into visiting a malicious website.
An attacker can leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of an arbitrary website. This could allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Adobe Flash Player is prone to a cross-site scripting vulnerability.
An attacker can exploit this issue by enticing an unsuspecting victim into visiting a malicious website.
An attacker can leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of an arbitrary website. This could allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Exploit / POC
Adobe Flash Player CVE-2011-2444 Cross Site Scripting Vulnerability
Reports indicate this issue is actively being exploited in the wild.
Reports indicate this issue is actively being exploited in the wild.
Solution / Fix
Adobe Flash Player CVE-2011-2444 Cross Site Scripting Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Adobe Flash Player CVE-2011-2444 Cross Site Scripting Vulnerability
References:
References:
- Adobe Homepage (Adobe)
- Google Chrome Homepage (Google)
- Multiple vulnerabilities in Adobe Flashplayer (Oracle)
- Security update available for Adobe Flash Player (Adobe)
- Multiple Vulnerabilities in Adobe Flashplayer (Oracle December 2011) (Avaya)
- Stable Channel Update 14.0.835.186 (Google)
- Vulnerabilities in Adobe Flash Player version included with the BlackBerry PlayB (Research In Motion)
- Xerox Security Bulletin XRX12-002 (Xerox)