CVE-2010-2179

Опубликовано: 15 июн. 2010

Источник: nvd

CVSS2: 4.3

EPSS Средний

Описание

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to URL parsing.

Ссылки

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
Third Party Advisory
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
Third Party Advisory
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
Third Party Advisory
http://secunia.com/advisories/40144
Broken Link
http://secunia.com/advisories/40545
Broken Link
http://secunia.com/advisories/43026
Broken Link
http://security.gentoo.org/glsa/glsa-201101-09.xml
Third Party Advisory
http://securitytracker.com/id?1024085
Third Party Advisory
VDB Entry
http://securitytracker.com/id?1024086
Broken Link
VDB Entry
http://support.apple.com/kb/HT4435
Broken Link
http://www.adobe.com/support/security/bulletins/apsb10-14.html
Broken Link
Patch
Third Party Advisory
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0464.html
Broken Link
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0470.html
Broken Link
Third Party Advisory
http://www.securityfocus.com/bid/40759
Broken Link
VDB Entry
http://www.securityfocus.com/bid/40808
Broken Link
VDB Entry
http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt
Broken Link
http://www.us-cert.gov/cas/techalerts/TA10-162A.html
Third Party Advisory
US Government Resource
http://www.vupen.com/english/advisories/2010/1421
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Версия до 9.0.277.0 (исключая)

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Версия от 10.0.0.0 (включая) до 10.1.53.64 (исключая)

Одно из

cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*

Версия до 2.0.2.12610 (исключая)

Одно из

cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.22192

Средний

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2010-2179

ubuntu

больше 15 лет назад

CVE-2010-2179

redhat

больше 15 лет назад

GHSA-9q9v-wxmj-6xqx

github

больше 3 лет назад

EPSS

Процентиль: 95%

0.22192

Средний

4.3 Medium

CVSS2

Дефекты

CWE-79