CVE-2011-2444

Publication date 22 September 2011

Last updated 24 July 2024


Ubuntu priority

Description

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, related to a "universal cross-site scripting issue," as exploited in the wild in September 2011.

Status

Package Ubuntu Release Status
adobe-flashplugin 11.04 natty
Fixed 10.3.183.10-0natty1
10.10 maverick
Fixed 10.3.183.10-0maverick1
10.04 LTS lucid
Fixed 10.3.183.10-0lucid1
8.04 LTS hardy Ignored end of life
flashplugin-nonfree 11.04 natty
Fixed 10.3.183.10ubuntu0.11.04.1
10.10 maverick
Fixed 10.3.183.10ubuntu0.10.10.1
10.04 LTS lucid
Fixed 10.3.183.10ubuntu0.10.04.1
8.04 LTS hardy Ignored end of life


Access our resources on patching vulnerabilities