CVE-2010-3636

🗓️ 07 Nov 2010 21:00:00Reported by adobeType

Adobe Flash Player < 9.0.289.0 and 10.x < 10.1.102.64 on multiple platforms does not properly handle encodings in cross-domain policy file parsing, allowing remote servers to bypass access restrictions

Reporter	Title	Published	Views	Family All 68
Tenable Nessus	Flash Player < 9.0.289 / 10.1.102.64 Multiple Vulnerabilities (APSB10-26)	5 Nov 201000:00	–	nessus
Tenable Nessus	Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities	11 Nov 201000:00	–	nessus
Tenable Nessus	Mac OS X 10.6 < 10.6.5 Multiple Vulnerabilities	11 Nov 201000:00	–	nessus
Tenable Nessus	Adobe Acrobat 9.x < 9.4.1 Multiple Vulnerabilities (APSB10-28)	16 Nov 201000:00	–	nessus
Tenable Nessus	Adobe AIR < 2.5.1 Multiple Vulnerabilities (APSB10-26)	15 Nov 201000:00	–	nessus
Tenable Nessus	Adobe Reader < 9.4.1 Multiple Vulnerabilities (APSB10-28)	16 Nov 201000:00	–	nessus
Tenable Nessus	Flash Player < 9.0.289 / 10.1.102.64 Multiple Vulnerabilities (APSB10-26)	5 Nov 201000:00	–	nessus
Tenable Nessus	FreeBSD : linux-flashplugin -- multiple vulnerabilities (76b597e4-e9c6-11df-9e10-001b2134ef46)	8 Nov 201000:00	–	nessus
Tenable Nessus	GLSA-201101-09 : Adobe Flash Player: Multiple vulnerabilities	24 Jan 201100:00	–	nessus
Tenable Nessus	Mac OS X 10.6.x < 10.6.5 Multiple Vulnerabilities	10 Nov 201000:00	–	nessus

NVD

Node

adobe flash_playerRange9.0–9.0.289.0

adobe flash_playerRange10.0–10.1.102.64

AND

apple mac_os_xMatch-

linux linux_kernelMatch-

microsoft windowsMatch-

sun solarisMatch-

Node

adobe flash_playerRange≤10.1.95.1

AND

google androidMatch-

Source	Link
redhat	www.redhat.com/support/errata/RHSA-2010-0829.html
redhat	www.redhat.com/support/errata/RHSA-2010-0867.html
vupen	www.vupen.com/english/advisories/2010/2903
adobe	www.adobe.com/support/security/bulletins/apsb10-26.html
vupen	www.vupen.com/english/advisories/2010/2906
jvndb	www.jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000054.html
jvn	www.jvn.jp/en/jp/JVN48425028/index.html
secunia	www.secunia.com/advisories/42926
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15913
blogs	www.blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1

29 Apr 2026 01:13Current

9.2High risk

Vulners AI Score9.2

CVSS 29.3

EPSS0.01676

CWE-264