PT-2010-2000 · Adobe · Reader+3

Michael Yong Park · Published 2010-02-15 · Updated 2018-10-30 · CVE-2010-0186

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.0.45.2 Adobe AIR versions prior to 1.5.3.9130 Adobe Reader and Acrobat versions 8.x prior to 8.2.1 Adobe Reader and Acrobat versions 9.x prior to 9.3.1

Description A cross-domain issue allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests.

Recommendations For Adobe Flash Player versions prior to 10.0.45.2, update to version 10.0.45.2 or later. For Adobe AIR versions prior to 1.5.3.9130, update to version 1.5.3.9130 or later. For Adobe Reader and Acrobat versions 8.x prior to 8.2.1, update to version 8.2.1 or later. For Adobe Reader and Acrobat versions 9.x prior to 9.3.1, update to version 9.3.1 or later.

Fix

Related Identifiers

CVE-2010-0186

RHSA-2010:0102

RHSA-2010:0103

RHSA-2010:0114

Affected Products

Air

Acrobat

Flash Player

Reader

References · 23

• http://secunia.com/advisories/38639 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2010-0114.html · Vendor Advisory
• http://secunia.com/advisories/38547 · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2010-0103.html · Vendor Advisory
• http://adobe.com/support/security/bulletins/apsb10-07.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0186 · Security Note
• http://adobe.com/support/security/bulletins/apsb10-06.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201101-09.xml · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html · Vendor Advisory
• https://rhn.redhat.com/errata/RHSA-2010-0102.html · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8518 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=563819 · Note
• http://securitytracker.com/id?1023585 · Note
• http://vupen.com/english/advisories/2011/0192 · Note