CVE-2011-2458 Information

Description

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows Mac OS X Linux and Solaris and before 11.1.102.59 on Android and Adobe AIR before 3.1.0.4880 when Internet Explorer is used allows remote attackers to bypass the cross-domain policy via a crafted web site.

Reference

http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00014.html http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00017.html http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00019.html http://secunia.com/advisories/48819 http://security.gentoo.org/glsa/glsa-201204-07.xml http://www.adobe.com/support/security/bulletins/apsb11-28.html https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A14014 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A16179