CVE-2011-2461 Cross-site scripting (XSS) vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from....
MediumCVSS 4.3
EPSS 7.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the Adobe Flex SDK 3.x and 4.x before 4.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to the loading of modules from different domains.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flex sdk | = 3.0 | No fix listed |
| Adobe flex sdk | = 3.0.1 | No fix listed |
| Adobe flex sdk | = 3.1 | No fix listed |
| Adobe flex sdk | = 3.2 | No fix listed |
| Adobe flex sdk | = 3.3 | No fix listed |
| Adobe flex sdk | = 3.4 | No fix listed |
| Adobe flex sdk | = 3.4.1 | No fix listed |
| Adobe flex sdk | = 3.5 | No fix listed |
| Adobe flex sdk | = 3.5a | No fix listed |
| Adobe flex sdk | = 3.6 | No fix listed |
| Adobe flex sdk | = 4.0 | No fix listed |
| Adobe flex sdk | = 4.1 | No fix listed |
| Adobe flex sdk | = 4.5 | No fix listed |
| Adobe flex sdk | = 4.5.1 | No fix listed |
References
- blog.mindedsecurity.com
- blog.nibblesec.org
- kb2.adobe.com
- packetstormsecurity.com exploit
- 47053 third-party-advisory
- www.adobe.com vendor-advisory
- threatpost.com