CVE-2011-2107

MEDIUM 4.3CVE-2011-2107 · Published 09/06/2011 · updated 16/06/2026

In short

CVE-2011-2107 is a MEDIUM (CVSS 4.3) vulnerability affecting acrobat (adobe), acrobat reader (adobe), flash player (adobe).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
acrobat adobe	`= 10.0= 10.0.1= 10.0.2= 9.0= 9.1= 9.1.1= 9.1.2= 9.1.3= 9.2= 9.3= 9.3.1= 9.3.2= 9.3.3= 9.3.4= 9.4= 9.4.1= 9.4.2= 9.4.3= 9.4.4≤ 10.0.3`	No fix yet
acrobat reader adobe	`= 10.0= 10.0.1= 10.0.2= 9.0= 9.1= 9.1.1= 9.1.2= 9.1.3= 9.2= 9.3= 9.3.1= 9.3.2= 9.3.3= 9.3.4= 9.4= 9.4.1= 9.4.2= 9.4.3= 9.4.4≤ 10.0.3`	No fix yet
flash player adobe	`= 10.0.0.584= 10.0.12.10= 10.0.12.36= 10.0.15.3= 10.0.22.87= 10.0.32.18= 10.0.42.34= 10.0.45.2= 10.1.102.64= 10.1.105.6= 10.1.106.16= 10.1.52.14.1= 10.1.52.15= 10.1.53.64= 10.1.82.76= 10.1.85.3= 10.1.92.10= 10.1.92.8= 10.1.95.1= 10.1.95.2= 10.2.152= 10.2.152.32= 10.2.152.33= 10.2.153.1= 10.2.154.13= 10.2.154.25= 10.2.156.12= 10.2.157.51= 10.2.159.1= 10.3.181.14= 6.0.21.0= 6.0.79= 7.0= 7.0.1= 7.0.14.0= 7.0.19.0= 7.0.24.0= 7.0.25= 7.0.53.0= 7.0.60.0= 7.0.61.0= 7.0.63= 7.0.66.0= 7.0.67.0= 7.0.68.0= 7.0.69.0= 7.0.70.0= 7.0.73.0= 7.1= 7.1.1= 7.2= 8.0= 8.0.22.0= 8.0.24.0= 8.0.33.0= 8.0.34.0= 8.0.35.0= 8.0.39.0= 8.0.42.0= 9.0= 9.0.112.0= 9.0.114.0= 9.0.115.0= 9.0.124.0= 9.0.125.0= 9.0.151.0= 9.0.152.0= 9.0.155.0= 9.0.159.0= 9.0.16= 9.0.18d60= 9.0.20= 9.0.20.0= 9.0.246.0= 9.0.260.0= 9.0.262.0`

Description

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vulnerability."

References

googlechromereleases.blogspot.com/2011/06/stable-channel-update.html
secunia.com/advisories/44846
secunia.com/advisories/44847 · Vendor Advisory
secunia.com/advisories/44871 · Vendor Advisory
secunia.com/advisories/44872 · Vendor Advisory
secunia.com/advisories/44946 · Vendor Advisory
secunia.com/advisories/48308
adobe.com/support/security/bulletins/apsb11-13.html · Patch
blackberry.com/btsc/KB27240
redhat.com/support/errata/RHSA-2011-0850.html
securityfocus.com/bid/48107
securitytracker.com/id
securitytracker.com/id
exchange.xforce.ibmcloud.com/vulnerabilities/67838

More vulnerabilities in acrobat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

acrobat

adobe

= 10.0= 10.0.1= 10.0.2= 9.0= 9.1= 9.1.1= 9.1.2= 9.1.3= 9.2= 9.3= 9.3.1= 9.3.2= 9.3.3= 9.3.4= 9.4= 9.4.1= 9.4.2= 9.4.3= 9.4.4≤ 10.0.3

No fix yet

acrobat reader

adobe

= 10.0= 10.0.1= 10.0.2= 9.0= 9.1= 9.1.1= 9.1.2= 9.1.3= 9.2= 9.3= 9.3.1= 9.3.2= 9.3.3= 9.3.4= 9.4= 9.4.1= 9.4.2= 9.4.3= 9.4.4≤ 10.0.3

No fix yet

flash player

adobe

= 10.0.0.584= 10.0.12.10= 10.0.12.36= 10.0.15.3= 10.0.22.87= 10.0.32.18= 10.0.42.34= 10.0.45.2= 10.1.102.64= 10.1.105.6= 10.1.106.16= 10.1.52.14.1= 10.1.52.15= 10.1.53.64= 10.1.82.76= 10.1.85.3= 10.1.92.10= 10.1.92.8= 10.1.95.1= 10.1.95.2= 10.2.152= 10.2.152.32= 10.2.152.33= 10.2.153.1= 10.2.154.13= 10.2.154.25= 10.2.156.12= 10.2.157.51= 10.2.159.1= 10.3.181.14= 6.0.21.0= 6.0.79= 7.0= 7.0.1= 7.0.14.0= 7.0.19.0= 7.0.24.0= 7.0.25= 7.0.53.0= 7.0.60.0= 7.0.61.0= 7.0.63= 7.0.66.0= 7.0.67.0= 7.0.68.0= 7.0.69.0= 7.0.70.0= 7.0.73.0= 7.1= 7.1.1= 7.2= 8.0= 8.0.22.0= 8.0.24.0= 8.0.33.0= 8.0.34.0= 8.0.35.0= 8.0.39.0= 8.0.42.0= 9.0= 9.0.112.0= 9.0.114.0= 9.0.115.0= 9.0.124.0= 9.0.125.0= 9.0.151.0= 9.0.152.0= 9.0.155.0= 9.0.159.0= 9.0.16= 9.0.18d60= 9.0.20= 9.0.20.0= 9.0.246.0= 9.0.260.0= 9.0.262.0

Description

More vulnerabilities in acrobat

See all →