CVE-2010-2179

2010-06-1500:00:00

ubuntu.com

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.8%

JSON

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before
9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610,
when Firefox or Chrome is used, allows remote attackers to inject arbitrary
web script or HTML via unspecified vectors related to URL parsing.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchadobe-flashplugin< 10.1.53.64-1UNKNOWN
ubuntu9.04noarchadobe-flashplugin< 10.1.53.64-1jaunty1UNKNOWN
ubuntu9.10noarchadobe-flashplugin< 10.1.53.64-1karmic1UNKNOWN
ubuntu10.04noarchadobe-flashplugin< 10.1.53.64-1lucid1UNKNOWN
ubuntu8.04noarchflashplugin-nonfree< 10.0.1.218+really9.0.277.0ubuntu1UNKNOWN
ubuntu9.04noarchflashplugin-nonfree< 10.1.53.64ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchflashplugin-nonfree< 10.1.53.64ubuntu0.9.10.1UNKNOWN
ubuntu10.04noarchflashplugin-nonfree< 10.1.53.64ubuntu0.10.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	adobe-flashplugin	< 10.1.53.64-1	UNKNOWN
ubuntu	9.04	noarch	adobe-flashplugin	< 10.1.53.64-1jaunty1	UNKNOWN
ubuntu	9.10	noarch	adobe-flashplugin	< 10.1.53.64-1karmic1	UNKNOWN
ubuntu	10.04	noarch	adobe-flashplugin	< 10.1.53.64-1lucid1	UNKNOWN
ubuntu	8.04	noarch	flashplugin-nonfree	< 10.0.1.218+really9.0.277.0ubuntu1	UNKNOWN
ubuntu	9.04	noarch	flashplugin-nonfree	< 10.1.53.64ubuntu0.9.04.1	UNKNOWN
ubuntu	9.10	noarch	flashplugin-nonfree	< 10.1.53.64ubuntu0.9.10.1	UNKNOWN
ubuntu	10.04	noarch	flashplugin-nonfree	< 10.1.53.64ubuntu0.10.04.1	UNKNOWN