CVE-2010-0186

flash-plugin: unauthorized cross-domain requests (APSB10-06)

Published Feb 15, 2010 CVSS 2.0 · 6.8 Medium EPSS 4.4% KEV · Not listed
Description
Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-0217 Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
adobe
Published
Updated
Aug 7, 2024, 12:37 AM
Reserved
Jan 6, 2010, 12:00 AM
Status
Modified
Published
Feb 15, 2010, 6:30 PM
Modified
Jun 16, 2026, 11:15 PM
Severity
Important
Public date
Feb 11, 2010, 12:00 AM