CVE-2010-0186
First published: Thu Feb 11 2010(Updated: )
Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.
Credit: psirt@adobe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/flash-plugin | <0:9.0.262.0-1.el3 | 0:9.0.262.0-1.el3 |
| redhat/flash-plugin | <0:9.0.262.0-1.el4 | 0:9.0.262.0-1.el4 |
| redhat/acroread | <0:9.3.1-1.el4 | 0:9.3.1-1.el4 |
| redhat/flash-plugin | <0:10.0.45.2-1.el5 | 0:10.0.45.2-1.el5 |
| redhat/acroread | <0:9.3.1-1.el5 | 0:9.3.1-1.el5 |
| Adobe Flash Player | =9.0.125.0 | |
| Adobe Adobe Air | =1.0 | |
| Adobe Flash Player | =9.0.48.0 | |
| Adobe Flash Player | =9.125.0 | |
| Adobe Adobe Air | =1.5.1 | |
| Adobe Flash Player | =8.0.24.0 | |
| Adobe Flash Player | =10.0.15.3 | |
| Adobe Flash Player | =6.0.79 | |
| Adobe Adobe Air | <=1.5.3.9120 | |
| Adobe Flash Player | =9.0.18d60 | |
| Adobe Flash Player | =7.1.1 | |
| Adobe Flash Player | =9.0.124.0 | |
| Adobe Flash Player | =9.0.47.0 | |
| Adobe Flash Player | =7.0.63 | |
| Adobe Flash Player | =7.0.70.0 | |
| Adobe Flash Player | =10.0.12.36 | |
| Adobe Flash Player | =8.0.35.0 | |
| Adobe Flash Player | =9.0.114.0 | |
| Adobe Flash Player | =9.0.20.0 | |
| Adobe Flash Player | =9.0.31.0 | |
| Adobe Flash Player | =8.0.22.0 | |
| Adobe Flash Player | =9.0.260.0 | |
| Adobe Flash Player | =9.0.159.0 | |
| Adobe Flash Player | =9.0.112.0 | |
| Adobe Flash Player | =9.0.16 | |
| Adobe Flash Player | <=10.0.42.34 | |
| Adobe Adobe Air | =1.5.3 | |
| Adobe Adobe Air | =1.5.2 | |
| Adobe Flash Player | =8.0.42.0 | |
| Adobe Flash Player | =9.0.28.0 | |
| Adobe Flash Player | =7.0.69.0 | |
| Adobe Flash Player | =10.0.22.87 | |
| Adobe Flash Player | =6.0.21.0 | |
| Adobe Flash Player | =9.0.45.0 | |
| Adobe Flash Player | =10.0.32.18 | |
| Adobe Flash Player | =7.0 | |
| Adobe Flash Player | =9.0.31 | |
| Adobe Flash Player | =7.2 | |
| Adobe Flash Player | =9.0.115.0 | |
| Adobe Flash Player | =7.0.25 | |
| Adobe Flash Player | =8.0 | |
| Adobe Flash Player | =8.0.33.0 | |
| Adobe Flash Player | =8.0.39.0 | |
| Adobe Flash Player | =8.0.34.0 | |
| Adobe Adobe Air | =1.1 | |
| Adobe Flash Player | =7.1 | |
| Adobe Flash Player | =10.0.12.10 | |
| Adobe Flash Player | =9.0.151.0 | |
| Adobe Flash Player | =9.0.20 | |
| Adobe Flash Player | =7.0.1 | |
| Adobe Flash Player | =9.0.246.0 | |
| Adobe Flash Player | =9.0.152.0 | |
| Adobe Flash Player | =9.0 | |
| Adobe Acrobat Reader | =8.0 | |
| Adobe Acrobat Reader | =8.1.7 | |
| Adobe Acrobat Reader | =8.1.2 | |
| Adobe Acrobat Reader | =9.2 | |
| Adobe Acrobat Reader | =9.1 | |
| Adobe Acrobat Reader | <=9.3 | |
| Adobe Acrobat Reader | =8.1.1 | |
| Adobe Acrobat Reader | =8.1 | |
| Adobe Acrobat Reader | =9.0 | |
| Adobe Acrobat Reader | =9.1.1 | |
| Adobe Acrobat Reader | =8.1.5 | |
| Adobe Acrobat Reader | =8.1.4 | |
| Adobe Acrobat Reader | =9.1.2 | |
| Adobe Acrobat Reader | =8.1.6 | |
| Adobe Acrobat Reader | =9.1.3 | |
| Adobe Acrobat Reader | =8.1.3 | |
| Adobe Acrobat Reader | =8.1.6 | |
| Adobe Acrobat Reader | =9.2 | |
| Adobe Acrobat Reader | =9.1 | |
| Adobe Acrobat Reader | =9.1.3 | |
| Adobe Acrobat Reader | =8.0 | |
| Adobe Acrobat Reader | =9.1.2 | |
| Adobe Acrobat Reader | =8.1.5 | |
| Adobe Acrobat Reader | =9.1.1 | |
| Adobe Acrobat Reader | =8.1.7 | |
| Adobe Acrobat Reader | =8.1.4 | |
| Adobe Acrobat Reader | =8.1.2 | |
| Adobe Acrobat Reader | <=9.3 | |
| Adobe Acrobat Reader | =9.0 | |
| Adobe Acrobat Reader | =8.1.1 | |
| Adobe Acrobat Reader | =8.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/38198
- https://rhn.redhat.com/errata/RHSA-2010-0102.html
- http://www.adobe.com/support/security/bulletins/apsb10-06.html
- http://securitytracker.com/id?1023585
- https://bugzilla.redhat.com/show_bug.cgi?id=563819
- https://rhn.redhat.com/errata/RHSA-2010-0103.html
- http://www.osvdb.org/62300
- http://www.adobe.com/support/security/bulletins/apsb10-07.html
- http://www.redhat.com/support/errata/RHSA-2010-0114.html
- http://secunia.com/advisories/38547
- http://secunia.com/advisories/38639
- http://secunia.com/advisories/38915
- http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html
- http://secunia.com/advisories/40220
- http://www.vupen.com/english/advisories/2010/1481
- http://support.apple.com/kb/HT4188
- http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html
- http://security.gentoo.org/glsa/glsa-201101-09.xml
- http://www.vupen.com/english/advisories/2011/0192
- http://secunia.com/advisories/43026
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8518
- https://access.redhat.com/security/cve/CVE-2010-0186
- https://access.redhat.com/security/cve/CVE-2010-0187
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=564287
- https://rhn.redhat.com/errata/RHSA-2010-0114.html
- https://www.cve.org/CVERecord?id=CVE-2010-0186 https://nvd.nist.gov/vuln/detail/CVE-2010-0186
- https://access.redhat.com/errata/RHSA-2010:0103
- https://access.redhat.com/errata/RHSA-2010:0114
- https://access.redhat.com/errata/RHSA-2010:0102
- https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2010-0186.json
Parent vulnerabilities
(Appears in the following advisories)
- agent/type
- agent/remedy
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-0186
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- collector/redhat-cve
- agent/software-canonical-lookup
- agent/event
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- package-manager/redhat
- vendor/adobe
- canonical/adobe flash player
- version/adobe flash player/9.0.125.0
- canonical/adobe adobe air
- version/adobe adobe air/1.0
- version/adobe flash player/9.0.48.0
- version/adobe flash player/9.125.0
- version/adobe adobe air/1.5.1
- version/adobe flash player/8.0.24.0
- version/adobe flash player/10.0.15.3
- version/adobe flash player/6.0.79
- version/adobe adobe air/1.5.3.9120
- version/adobe flash player/9.0.18d60
- version/adobe flash player/7.1.1
- version/adobe flash player/9.0.124.0
- version/adobe flash player/9.0.47.0
- version/adobe flash player/7.0.63
- version/adobe flash player/7.0.70.0
- version/adobe flash player/10.0.12.36
- version/adobe flash player/8.0.35.0
- version/adobe flash player/9.0.114.0
- version/adobe flash player/9.0.20.0
- version/adobe flash player/9.0.31.0
- version/adobe flash player/8.0.22.0
- version/adobe flash player/9.0.260.0
- version/adobe flash player/9.0.159.0
- version/adobe flash player/9.0.112.0
- version/adobe flash player/9.0.16
- version/adobe flash player/10.0.42.34
- version/adobe adobe air/1.5.3
- version/adobe adobe air/1.5.2
- version/adobe flash player/8.0.42.0
- version/adobe flash player/9.0.28.0
- version/adobe flash player/7.0.69.0
- version/adobe flash player/10.0.22.87
- version/adobe flash player/6.0.21.0
- version/adobe flash player/9.0.45.0
- version/adobe flash player/10.0.32.18
- version/adobe flash player/7.0
- version/adobe flash player/9.0.31
- version/adobe flash player/7.2
- version/adobe flash player/9.0.115.0
- version/adobe flash player/7.0.25
- version/adobe flash player/8.0
- version/adobe flash player/8.0.33.0
- version/adobe flash player/8.0.39.0
- version/adobe flash player/8.0.34.0
- version/adobe adobe air/1.1
- version/adobe flash player/7.1
- version/adobe flash player/10.0.12.10
- version/adobe flash player/9.0.151.0
- version/adobe flash player/9.0.20
- version/adobe flash player/7.0.1
- version/adobe flash player/9.0.246.0
- version/adobe flash player/9.0.152.0
- version/adobe flash player/9.0
- canonical/adobe acrobat reader
- version/adobe acrobat reader/8.0
- version/adobe acrobat reader/8.1.7
- version/adobe acrobat reader/8.1.2
- version/adobe acrobat reader/9.2
- version/adobe acrobat reader/9.1
- version/adobe acrobat reader/9.3
- version/adobe acrobat reader/8.1.1
- version/adobe acrobat reader/8.1
- version/adobe acrobat reader/9.0
- version/adobe acrobat reader/9.1.1
- version/adobe acrobat reader/8.1.5
- version/adobe acrobat reader/8.1.4
- version/adobe acrobat reader/9.1.2
- version/adobe acrobat reader/8.1.6
- version/adobe acrobat reader/9.1.3
- version/adobe acrobat reader/8.1.3