Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2010-0186
HistoryFeb 15, 2010 - 6:30 p.m.

CVE-2010-0186

2010-02-1518:30:00
[email protected]
web.nvd.nist.gov
49
cve
2010
0186
cross-domain vulnerability
adobe flash player
adobe air
adobe reader
adobe acrobat
remote attackers
sandbox restrictions
cross-domain requests
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.026 Low

EPSS

Percentile

90.3%

JSON

Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.

Affected configurations

NVD
Node
adobeadobe_airRange≤1.5.3.9120
OR
adobeadobe_airMatch1.0
OR
adobeadobe_airMatch1.1
OR
adobeadobe_airMatch1.5.1
OR
adobeadobe_airMatch1.5.2
OR
adobeadobe_airMatch1.5.3
OR
adobeflash_playerRange≤10.0.42.34
OR
adobeflash_playerMatch6.0.21.0
OR
adobeflash_playerMatch6.0.79
OR
adobeflash_playerMatch7.0
OR
adobeflash_playerMatch7.0.1
OR
adobeflash_playerMatch7.0.25
OR
adobeflash_playerMatch7.0.63
OR
adobeflash_playerMatch7.0.69.0
OR
adobeflash_playerMatch7.0.70.0
OR
adobeflash_playerMatch7.1
OR
adobeflash_playerMatch7.1.1
OR
adobeflash_playerMatch7.2
OR
adobeflash_playerMatch8.0
OR
adobeflash_playerMatch8.0.22.0
OR
adobeflash_playerMatch8.0.24.0
OR
adobeflash_playerMatch8.0.33.0
OR
adobeflash_playerMatch8.0.34.0
OR
adobeflash_playerMatch8.0.35.0
OR
adobeflash_playerMatch8.0.39.0
OR
adobeflash_playerMatch8.0.42.0
OR
adobeflash_playerMatch9.0
OR
adobeflash_playerMatch9.0.16
OR
adobeflash_playerMatch9.0.18d60
OR
adobeflash_playerMatch9.0.20
OR
adobeflash_playerMatch9.0.20.0
OR
adobeflash_playerMatch9.0.28.0
OR
adobeflash_playerMatch9.0.31
OR
adobeflash_playerMatch9.0.31.0
OR
adobeflash_playerMatch9.0.45.0
OR
adobeflash_playerMatch9.0.47.0
OR
adobeflash_playerMatch9.0.48.0
OR
adobeflash_playerMatch9.0.112.0
OR
adobeflash_playerMatch9.0.114.0
OR
adobeflash_playerMatch9.0.115.0
OR
adobeflash_playerMatch9.0.124.0
OR
adobeflash_playerMatch9.0.125.0
OR
adobeflash_playerMatch9.0.151.0
OR
adobeflash_playerMatch9.0.152.0
OR
adobeflash_playerMatch9.0.159.0
OR
adobeflash_playerMatch9.0.246.0
OR
adobeflash_playerMatch9.0.260.0
OR
adobeflash_playerMatch9.125.0
OR
adobeflash_playerMatch10.0.12.10
OR
adobeflash_playerMatch10.0.12.36
OR
adobeflash_playerMatch10.0.15.3
OR
adobeflash_playerMatch10.0.22.87
OR
adobeflash_playerMatch10.0.32.18
Node
adobeacrobatRange≤9.3
OR
adobeacrobatMatch8.0
OR
adobeacrobatMatch8.1
OR
adobeacrobatMatch8.1.1
OR
adobeacrobatMatch8.1.2
OR
adobeacrobatMatch8.1.3
OR
adobeacrobatMatch8.1.4
OR
adobeacrobatMatch8.1.5
OR
adobeacrobatMatch8.1.6
OR
adobeacrobatMatch8.1.7
OR
adobeacrobatMatch9.0
OR
adobeacrobatMatch9.1
OR
adobeacrobatMatch9.1.1
OR
adobeacrobatMatch9.1.2
OR
adobeacrobatMatch9.1.3
OR
adobeacrobatMatch9.2
Node
adobeacrobat_readerRange≤9.3
OR
adobeacrobat_readerMatch8.0
OR
adobeacrobat_readerMatch8.1
OR
adobeacrobat_readerMatch8.1.1
OR
adobeacrobat_readerMatch8.1.2
OR
adobeacrobat_readerMatch8.1.4
OR
adobeacrobat_readerMatch8.1.5
OR
adobeacrobat_readerMatch8.1.6
OR
adobeacrobat_readerMatch8.1.7
OR
adobeacrobat_readerMatch9.0
OR
adobeacrobat_readerMatch9.1
OR
adobeacrobat_readerMatch9.1.1
OR
adobeacrobat_readerMatch9.1.2
OR
adobeacrobat_readerMatch9.1.3
OR
adobeacrobat_readerMatch9.2

References

Related

checkpoint_advisories 1
nvd 1
nessus 25
cvelist 1
redhat 3
ubuntucve 1
prion 1
openvas 14
threatpost 1
freebsd 1
gentoo 2
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player Subvert Domain Sandbox (APSB10-06; CVE-2010-0186)
2010-02-21 00:00:00
nvd
nvd
CVE-2010-0186
2010-02-15 18:30:00
nessus
nessus
RHEL 3 / 4 : flash-plugin (RHSA-2010:0103)
2013-01-24 00:00:00
SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6881)
2011-01-27 00:00:00
RHEL 5 : flash-plugin (RHSA-2010:0102)
2013-01-24 00:00:00
cvelist
cvelist
CVE-2010-0186
2010-02-15 18:00:00
redhat
redhat
(RHSA-2010:0103) Important: flash-plugin security update
2010-02-12 00:00:00
(RHSA-2010:0102) Important: flash-plugin security update
2010-02-12 00:00:00
(RHSA-2010:0114) Critical: acroread security and bug fix update
2010-02-18 00:00:00
ubuntucve
ubuntucve
CVE-2010-0186
2010-02-15 00:00:00
prion
prion
Cross site scripting
2010-02-15 18:30:00
openvas
openvas
Adobe Flash Player/Air Multiple Vulnerabilities (Feb 2010) - Windows
2010-02-19 00:00:00
FreeBSD Ports: linux-flashplugin
2010-02-18 00:00:00
Adobe Flash Player/Air Multiple Vulnerabilities -feb10 (Linux)
2010-02-19 00:00:00
threatpost
threatpost
Adobe Plugs Critical PDF Code Execution Flaw
2010-02-16 21:14:52
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2010-02-11 00:00:00
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2010-09-07 00:00:00
Adobe Flash Player: Multiple vulnerabilities
2011-01-21 00:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.026 Low

EPSS

Percentile

90.3%

JSON
Related for CVE-2010-0186
checkpoint_advisories1nvd1nessus25cvelist1redhat3ubuntucve1prion1openvas14threatpost1freebsd1gentoo2