Executive Summary
Informations | |||
---|---|---|---|
Name | CVE-2010-0186 | First vendor Publication | 2010-02-15 |
Vendor | Cve | Last vendor Modification | 2024-11-21 |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:M/Au:N/C:P/I:P/A:P) | |||
---|---|---|---|
Cvss Base Score | 6.8 | Attack Range | Network |
Cvss Impact Score | 6.4 | Attack Complexity | Medium |
Cvss Expoit Score | 8.6 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors. |
Original Source
Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0186 |
OVAL Definitions
Definition Id: oval:org.mitre.oval:def:8518 | |||
Oval ID: | oval:org.mitre.oval:def:8518 | ||
Title: | Adobe Flash Player, Acrobat, Adobe Reader and AIR Cross Domain Request Vulnerability | ||
Description: | Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors. | ||
Family: | windows | Class: | vulnerability |
Reference(s): | CVE-2010-0186 | Version: | 27 |
Platform(s): | Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012 Microsoft Windows 8.1 Microsoft Windows Server 2012 R2 | Product(s): | Adobe Flash Player Adobe AIR Adobe Reader Adobe Acrobat |
Definition Synopsis: | |||
|
CPE : Common Platform Enumeration
OpenVAS Exploits
Date | Description |
---|---|
2011-03-09 | Name : Gentoo Security Advisory GLSA 201009-05 (acroread) File : nvt/glsa_201009_05.nasl |
2011-03-09 | Name : Gentoo Security Advisory GLSA 201101-09 (adobe-flash) File : nvt/glsa_201101_09.nasl |
2010-02-26 | Name : Adobe Acrobat and Reader PDF Handling Code Execution Vulnerability (Linux) File : nvt/secpod_adobe_prdts_code_exec_vuln_feb10_lin.nasl |
2010-02-26 | Name : Adobe Acrobat and Reader PDF Handling Code Execution Vulnerability (Windows) File : nvt/secpod_adobe_prdts_code_exec_vuln_feb10_win.nasl |
2010-02-19 | Name : Adobe Flash Player/Air Multiple Vulnerabilities -feb10 (Linux) File : nvt/gb_adobe_prdts_mult_vuln_feb10_lin.nasl |
2010-02-19 | Name : Adobe Flash Player/Air Multiple Vulnerabilities -feb10 (Win) File : nvt/gb_adobe_prdts_mult_vuln_feb10_win.nasl |
2010-02-18 | Name : FreeBSD Ports: linux-flashplugin File : nvt/freebsd_linux-flashplugin7.nasl |
Open Source Vulnerability Database (OSVDB)
Id | Description |
---|---|
62300 | Adobe Flash Player Cross-domain Sandbox Restriction Bypass An unspecified vulnerability makes it possible to bypass the cross-domain restrictions. This would allow an attacker to perform cross-domain requests in violation of the same-origin policy and might allow to obtain or modify information from a different domain. |
Nessus® Vulnerability Scanner
Date | Description |
---|---|
2013-01-24 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0102.nasl - Type : ACT_GATHER_INFO |
2013-01-24 | Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0103.nasl - Type : ACT_GATHER_INFO |
2011-01-27 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_flash-player-6845.nasl - Type : ACT_GATHER_INFO |
2011-01-27 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_flash-player-6844.nasl - Type : ACT_GATHER_INFO |
2011-01-27 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread-6881.nasl - Type : ACT_GATHER_INFO |
2011-01-27 | Name : The remote SuSE 10 host is missing a security-related patch. File : suse_acroread-6879.nasl - Type : ACT_GATHER_INFO |
2011-01-24 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201101-09.nasl - Type : ACT_GATHER_INFO |
2010-09-08 | Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201009-05.nasl - Type : ACT_GATHER_INFO |
2010-06-15 | Name : The remote host is missing a Mac OS X update that fixes various security issues. File : macosx_10_6_4.nasl - Type : ACT_GATHER_INFO |
2010-06-15 | Name : The remote host is missing a Mac OS X update that fixes a security issue. File : macosx_SecUpd2010-004.nasl - Type : ACT_GATHER_INFO |
2010-03-04 | Name : The remote openSUSE host is missing a security update. File : suse_11_0_acroread-100225.nasl - Type : ACT_GATHER_INFO |
2010-03-04 | Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_acroread-100225.nasl - Type : ACT_GATHER_INFO |
2010-03-04 | Name : The remote openSUSE host is missing a security update. File : suse_11_2_acroread-100225.nasl - Type : ACT_GATHER_INFO |
2010-03-04 | Name : The remote openSUSE host is missing a security update. File : suse_11_1_acroread-100225.nasl - Type : ACT_GATHER_INFO |
2010-02-19 | Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0114.nasl - Type : ACT_GATHER_INFO |
2010-02-17 | Name : The remote openSUSE host is missing a security update. File : suse_11_0_flash-player-100214.nasl - Type : ACT_GATHER_INFO |
2010-02-17 | Name : The remote openSUSE host is missing a security update. File : suse_11_1_flash-player-100214.nasl - Type : ACT_GATHER_INFO |
2010-02-17 | Name : The version of Adobe Acrobat on the remote Windows host is affected by multip... File : adobe_acrobat_apsb10-07.nasl - Type : ACT_GATHER_INFO |
2010-02-17 | Name : The remote openSUSE host is missing a security update. File : suse_11_2_flash-player-100214.nasl - Type : ACT_GATHER_INFO |
2010-02-17 | Name : The remote SuSE 11 host is missing a security update. File : suse_11_flash-player-100214.nasl - Type : ACT_GATHER_INFO |
2010-02-17 | Name : The version of Adobe Reader on the remote Windows host is affected by multipl... File : adobe_reader_apsb10-07.nasl - Type : ACT_GATHER_INFO |
2010-02-15 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_ff6519ad18e511df9bdd001b2134ef46.nasl - Type : ACT_GATHER_INFO |
2010-02-12 | Name : The remote Windows host contains a browser plug-in that is affected by multip... File : flash_player_apsb10_06.nasl - Type : ACT_GATHER_INFO |
2010-02-12 | Name : The remote Windows host contains a version of Adobe AIR that is affected by m... File : adobe_air_apsb10-06.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
Date | Informations |
---|---|
2024-11-28 23:09:24 |
|
2024-11-28 12:20:59 |
|
2024-10-12 01:12:43 |
|
2024-09-06 01:12:16 |
|
2024-07-20 01:11:43 |
|
2022-10-19 01:09:34 |
|
2021-05-04 12:11:03 |
|
2021-04-22 01:11:33 |
|
2020-05-23 01:41:33 |
|
2020-05-23 00:25:08 |
|
2018-12-15 12:02:25 |
|
2018-11-30 12:03:07 |
|
2018-10-31 00:20:01 |
|
2018-10-30 12:03:15 |
|
2018-03-06 12:02:20 |
|
2017-09-19 09:23:36 |
|
2016-06-28 18:00:13 |
|
2016-04-26 19:31:07 |
|
2014-04-30 21:20:22 |
|
2014-02-17 10:53:22 |
|
2013-05-10 23:16:37 |
|