CVEvulnerability
CVE-2010-0186
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-02-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.
Affected configurations
• adobe adobe air (<= 1.5.3.9120)
• adobe adobe air 1.0
• adobe adobe air 1.1
• adobe adobe air 1.5.1
• adobe adobe air 1.5.2
• adobe adobe air 1.5.3
• adobe flash player (<= 10.0.42.34)
• adobe flash player 6.0.21.0
• adobe flash player 6.0.79
• adobe flash player 7.0
• adobe flash player 7.0.1
• adobe flash player 7.0.25
• adobe flash player 7.0.63
• adobe flash player 7.0.69.0
• adobe flash player 7.0.70.0
• adobe flash player 7.1
• adobe flash player 7.1.1
• adobe flash player 7.2
• adobe flash player 8.0
• adobe flash player 8.0.22.0
• adobe flash player 8.0.24.0
• adobe flash player 8.0.33.0
• adobe flash player 8.0.34.0
• adobe flash player 8.0.35.0
• adobe flash player 8.0.39.0
• adobe flash player 8.0.42.0
• adobe flash player 9.0
• adobe flash player 9.0.16
• adobe flash player 9.0.18d60
• adobe flash player 9.0.20
• adobe flash player 9.0.20.0
• adobe flash player 9.0.28.0
• adobe flash player 9.0.31
• adobe flash player 9.0.31.0
• adobe flash player 9.0.45.0
• adobe flash player 9.0.47.0
• adobe flash player 9.0.48.0
• adobe flash player 9.0.112.0
• adobe flash player 9.0.114.0
• adobe flash player 9.0.115.0
• adobe flash player 9.0.124.0
• adobe flash player 9.0.125.0
• adobe flash player 9.0.151.0
• adobe flash player 9.0.152.0
• adobe flash player 9.0.159.0
• adobe flash player 9.0.246.0
• adobe flash player 9.0.260.0
• adobe flash player 9.125.0
• adobe flash player 10.0.12.10
• adobe flash player 10.0.12.36
• adobe flash player 10.0.15.3
• adobe flash player 10.0.22.87
• adobe flash player 10.0.32.18
• adobe acrobat (<= 9.3)
• adobe acrobat 8.0
• adobe acrobat 8.1
• adobe acrobat 8.1.1
• adobe acrobat 8.1.2
• adobe acrobat 8.1.3
• adobe acrobat 8.1.4
… and 24 more
References
- http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html lists.opensuse.org
- http://secunia.com/advisories/38547 Vendor Advisory
- http://secunia.com/advisories/38639 Vendor Advisory
- http://secunia.com/advisories/38915 secunia.com
- http://secunia.com/advisories/40220 secunia.com
- http://secunia.com/advisories/43026 secunia.com
- http://security.gentoo.org/glsa/glsa-201101-09.xml security.gentoo.org
- http://securitytracker.com/id?1023585 securitytracker.com
- http://support.apple.com/kb/HT4188 support.apple.com
- http://www.adobe.com/support/security/bulletins/apsb10-06.html Patch, Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb10-07.html Patch, Vendor Advisory
- http://www.osvdb.org/62300 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2010-0114.html www.redhat.com
- http://www.securityfocus.com/bid/38198 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/1481 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0192 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=563819 bugzilla.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8518 oval.cisecurity.org
- https://rhn.redhat.com/errata/RHSA-2010-0102.html rhn.redhat.com
- https://rhn.redhat.com/errata/RHSA-2010-0103.html rhn.redhat.com
- http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html lists.opensuse.org
- http://secunia.com/advisories/38547 Vendor Advisory
- http://secunia.com/advisories/38639 Vendor Advisory
- http://secunia.com/advisories/38915 secunia.com
- http://secunia.com/advisories/40220 secunia.com
- http://secunia.com/advisories/43026 secunia.com
- http://security.gentoo.org/glsa/glsa-201101-09.xml security.gentoo.org
- http://securitytracker.com/id?1023585 securitytracker.com
- http://support.apple.com/kb/HT4188 support.apple.com
- http://www.adobe.com/support/security/bulletins/apsb10-06.html Patch, Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb10-07.html Patch, Vendor Advisory
- http://www.osvdb.org/62300 www.osvdb.org
- http://www.redhat.com/support/errata/RHSA-2010-0114.html www.redhat.com
- http://www.securityfocus.com/bid/38198 www.securityfocus.com
- http://www.vupen.com/english/advisories/2010/1481 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0192 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=563819 bugzilla.redhat.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8518 oval.cisecurity.org
- https://rhn.redhat.com/errata/RHSA-2010-0102.html rhn.redhat.com
- https://rhn.redhat.com/errata/RHSA-2010-0103.html rhn.redhat.com