CVE-2011-2107

Publication date 9 June 2011

Last updated 17 July 2025


Ubuntu priority

Description

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."

Status

Package Ubuntu Release Status
adobe-flashplugin 11.04 natty
Fixed 10.3.181.22-0natty1
10.10 maverick
Fixed 10.3.181.22-0maverick1
10.04 LTS lucid
Fixed 10.3.181.22-0lucid1
8.04 LTS hardy Ignored end of life
flashplugin-nonfree 11.04 natty
Fixed 10.3.181.22ubuntu0.11.04.1
10.10 maverick
Fixed 10.3.181.22ubuntu0.10.10.1
10.04 LTS lucid
Fixed 10.3.181.22ubuntu0.10.04.1
8.04 LTS hardy Ignored end of life


Access our resources on patching vulnerabilities