Intrusion PreventionAdobe.Flash.LoadMovie.CSRF
Description
This indicates an attack attempt against a Cross Site Request Forgery vulnerability in Adobe Flash Player.
The vulnerability is caused by an error when the vulnerable software handles a crafted "swf" file. It allows a remote attacker to steal the CSRF protection cookie if the user visits a malicious website.
Affected Products
Adobe Flash Player 10.3.181.16 and earlier versions for Windows, Macintosh, Linux and Solaris operating systems.
Adobe Flash Player 10.3.185.22 and earlier versions for Android.
Impact
Security Bypass.
Recommended Actions
Update to Adobe Flash Player 10.3.181.22
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2021-01-11 | 16.995 |
| ID | 27558 |
| Created | Jun 10, 2011 |
| Updated | Jan 08, 2021 |
| Risk |
|
| CVE ID | CVE-2011-2107 |
| Exploit Prediction Score | 0.31% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, Solaris, MacOS |
| Affected App | Adobe |