PT-2010-4976 · Adobe+1 · Flash Player+1

CVE-2010-3636

·

Publicado

2010-11-07

·

Atualizado

2024-05-17

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 9.0.289.0 Adobe Flash Player versions 10.x prior to 10.1.102.64 Adobe Flash Player version 10.1.95.1 on Android
Description The issue arises from the improper handling of unspecified encodings during the parsing of a cross-domain policy file. This allows remote web servers to bypass intended access restrictions via unknown vectors.
Recommendations For Adobe Flash Player versions prior to 9.0.289.0, update to version 9.0.289.0 or later. For Adobe Flash Player versions 10.x prior to 10.1.102.64, update to version 10.1.102.64 or later. For Adobe Flash Player version 10.1.95.1 on Android, update to a version later than 10.1.95.1.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-3636
RHSA-2010:0829
RHSA-2010:0834
RHSA-2010:0867
RHSA-2010_0867

Produtos afetados

Flash Player
Red Hat