Adobe Flash Player Deprecated Tag Memory Corruption (APSB10-14; CVE-2010-2186)

The Adobe Flash Player is a multimedia and application player that renders Shockwave Flash SWF files. A memory corruption vulnerability has been reported in Adobe Flash Player. The vulnerability is due to an error in the Adobe Flash Player. A remote attacker might exploit this issue by convincing...

CVE-2010-2186

Technical details (affected product/version, root cause, impact, or patch) are not provided in the connected documents for CVE-2010-2186. Monitor for updates.

openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)

This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...

openSUSE Security Update : flash-player (openSUSE-SU-2010:0321-1)

This Flash Player update fixes multiple critical security vulnerabilities which allow an attacker to remotely execute arbitrary code or to cause a denial of service. The following CVE numbers have been assigned : CVE-2008-4546, CVE-2009-3793, CVE-2010-1297, CVE-2010-2160, CVE-2010-2161,...

Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)

The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...

CVE-2009-2186

Adobe Shockwave Player is affected by CVE-2009-2186, an unspecified vulnerability that allows remote code execution in versions before 11.0.0.465. The issue is related to an older vulnerability (CVE-2009-1860) which was previously resolved in 11.0.0.465. Affected product: Shockwave Player (Window...

CVE-2009-2186

Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2009-1860, related to an older issue that "was previously resolved in Shockwave Player 11.0.0.465."...

CVE-2008-2186

CVE-2008-2186 : A cross-site scripting (XSS) vulnerability exists in the Chilek Content Management System (ChiCoMaS) 2.0.4, specifically in index.php via the q parameter. This allows remote attackers to inject arbitrary web script or HTML. The available connected sources confirm the affected prod...

CVE-2007-2186

Technical details are not publicly available in the provided documents for CVE-2007-2186. Monitor for updates.

CVE-2006-2186

Affected product: zenphoto 1.0.1 beta and earlier. The vulnerability is an information-disclosure flaw where remote attackers can obtain sensitive data by directly requesting the URIs /photos/themes/default/ or /photos/themes/testing/, causing an error message that reveals the path. Impact is par...

CVE-2002-2186

Technical details about CVE-2002-2186 are not publicly provided in the connected documents. Monitor for updates.

CVE-2005-2186

CVE-2005-2186 describes multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management System. Remote authenticated users can inject arbitrary web script or HTML through either the thirdMenuName or resourceName parameter to SystemEvent.jsp. The NVD record assigns a ...

CVE-2002-2186

Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL...

CVE-2011-2186

...

CVE-2011-2186

Git-web (openSUSE) contains a cross-site scripting (XSS) vulnerability (CVE-2011-2186) where users with commit access to repos served by git-web could cause XSS in XML handling. The issue is addressed by openSUSE updates git-web-4756 (openSUSE-SU-2011:0705-1), which enable git-web’s XSS protectio...