CVE-2010-0186: Medium severity Adobe Adobe AIR vulnerability
Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.
Other sources
On Thursday, 2010-02-11, Adobe is planning to release updated tarballs for Adobe Flash Player of version v10.0.42.34, adressing two security issues:
1, An unspecified critical vulnerability was found in Adobe Flash Player (and related products), which could allow an attacker to subvert the domain sandbox and make unauthorized cross-domain requests. (CVE-2010-0186).
Credit: Michael Yong Park Vulnerable versions of Adobe Flash Player: v10.0.42.34 and earlier Not vulnerable versions of Adobe Flash Player: 10.0.45.2
2, An unspecified vulnerability was found in Adobe Flash Player (and related products), which could allow an attacker to cause denial of service by unspecified vectors. (CVE-2010-0187)
References: http://www.adobe.com/support/security/bulletins/apsb10-06.html
— Red Hat
Affected Software
Remediation
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2010-0186?
CVE-2010-0186 has been classified as a critical vulnerability, allowing cross-domain access and potential exploitation by attackers.
How do I fix CVE-2010-0186?
To fix CVE-2010-0186, upgrade your Adobe software to the latest versions listed in the security advisories.
Which Adobe products are affected by CVE-2010-0186?
CVE-2010-0186 affects Adobe Flash Player, Adobe AIR, and Adobe Reader versions prior to their respective patched releases.
Can CVE-2010-0186 lead to data theft?
Yes, CVE-2010-0186 can potentially allow attackers to bypass security restrictions and access sensitive data across domains.
What are the potential impacts of CVE-2010-0186?
The potential impacts of CVE-2010-0186 include unauthorized data access and exploitation of application functionality by malicious users.