Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-3636
HistoryNov 07, 2010 - 10:00 p.m.

CVE-2010-3636

2010-11-0722:00:01
CWE-264
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.5%

JSON

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.

Affected configurations

NVD
Node
adobeflash_playerRange9.0–9.0.289.0
OR
adobeflash_playerRange10.0–10.1.102.64
AND
applemac_os_xMatch-
OR
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-
OR
sunsolarisMatch-
Node
adobeflash_playerRange≤10.1.95.1
AND
googleandroidMatch-

References

Related

cve 1
ubuntucve 1
cvelist 1
jvn 1
prion 1
redhat 3
nessus 17
openvas 12
securityvulns 5
freebsd 1
suse 1
gentoo 1
cve
cve
CVE-2010-3636
2010-11-07 22:00:01
ubuntucve
ubuntucve
CVE-2010-3636
2010-11-07 00:00:00
cvelist
cvelist
CVE-2010-3636
2010-11-07 21:00:00
jvn
jvn
JVN#48425028: Flash Player access restriction bypass vulnerability
2010-11-09 00:00:00
prion
prion
Cross site scripting
2010-11-07 22:00:00
redhat
redhat
(RHSA-2010:0834) Critical: flash-plugin security update
2010-11-08 00:00:00
(RHSA-2010:0829) Critical: flash-plugin security update
2010-11-05 00:00:00
(RHSA-2010:0867) Critical: flash-plugin security update
2010-11-10 00:00:00
nessus
nessus
RHEL 5 : flash-plugin (RHSA-2010:0829)
2013-01-24 00:00:00
RHEL 6 : flash-plugin (RHSA-2010:0867)
2010-11-18 00:00:00
Adobe Acrobat 9.x < 9.4.1 Multiple Vulnerabilities (APSB10-28)
2010-11-16 00:00:00
openvas
openvas
Adobe Flash Player Multiple Vulnerabilities (Linux)
2010-11-12 00:00:00
Adobe Flash Player Multiple Vulnerabilities (Windows)
2010-11-12 00:00:00
Adobe Flash Player Multiple Vulnerabilities - Windows
2010-11-12 00:00:00
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2010-11-08 00:00:00
[security bulletin] HPSBMA02663 SSRT100428 rev.1 - HP Systems Insight Manager &#40;SIM&#41; for HP-UX, Linux, and Windows, Remote Cross Site Scripting &#40;XSS&#41;, Cross Site Request Forgery &#40;CSRF&#41;, Execution of Arbitrary Code, Denial of Se
2011-04-21 00:00:00
Security update available for Adobe Flash Player
2010-11-08 00:00:00
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2010-09-28 00:00:00
suse
suse
remote code execution in flash-player
2010-11-05 13:12:10
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2011-01-21 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.5%

JSON
Related for NVD:CVE-2010-3636
cve1ubuntucve1cvelist1jvn1prion1redhat3nessus17openvas12securityvulns5freebsd1suse1gentoo1