CVE-2010-3636

2010-11-0700:00:00

ubuntu.com

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.5%

JSON

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows,
Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly
handle unspecified encodings during the parsing of a cross-domain policy
file, which allows remote web servers to bypass intended access
restrictions via unknown vectors.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchadobe-flashplugin< 10.1.102.64-1UNKNOWN
ubuntu9.10noarchadobe-flashplugin< 10.1.102.64-1karmic1UNKNOWN
ubuntu10.04noarchadobe-flashplugin< 10.1.102.64-1lucid1UNKNOWN
ubuntu10.10noarchadobe-flashplugin< 10.1.102.64-1maverick1UNKNOWN
ubuntu8.04noarchflashplugin-nonfree< 10.0.1.218+really9.0.289.0ubuntu1UNKNOWN
ubuntu9.10noarchflashplugin-nonfree< 10.1.102.64ubuntu0.9.10.1UNKNOWN
ubuntu10.04noarchflashplugin-nonfree< 10.1.102.64ubuntu0.10.04.1UNKNOWN
ubuntu10.10noarchflashplugin-nonfree< 10.1.102.64ubuntu0.10.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	adobe-flashplugin	< 10.1.102.64-1	UNKNOWN
ubuntu	9.10	noarch	adobe-flashplugin	< 10.1.102.64-1karmic1	UNKNOWN
ubuntu	10.04	noarch	adobe-flashplugin	< 10.1.102.64-1lucid1	UNKNOWN
ubuntu	10.10	noarch	adobe-flashplugin	< 10.1.102.64-1maverick1	UNKNOWN
ubuntu	8.04	noarch	flashplugin-nonfree	< 10.0.1.218+really9.0.289.0ubuntu1	UNKNOWN
ubuntu	9.10	noarch	flashplugin-nonfree	< 10.1.102.64ubuntu0.9.10.1	UNKNOWN
ubuntu	10.04	noarch	flashplugin-nonfree	< 10.1.102.64ubuntu0.10.04.1	UNKNOWN
ubuntu	10.10	noarch	flashplugin-nonfree	< 10.1.102.64ubuntu0.10.10.1	UNKNOWN