CVE-2010-2179

Опубликовано: 15 июн. 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to URL parsing.

Ссылки

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
Third Party Advisory
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
Mailing List
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
Third Party Advisory
http://secunia.com/advisories/40144
Broken Link
http://secunia.com/advisories/40545
Broken Link
http://secunia.com/advisories/43026
Broken Link
http://security.gentoo.org/glsa/glsa-201101-09.xml
Third Party Advisory
http://securitytracker.com/id?1024085
Third Party Advisory
VDB Entry
http://securitytracker.com/id?1024086
Broken Link
VDB Entry
http://support.apple.com/kb/HT4435
Broken Link
http://www.adobe.com/support/security/bulletins/apsb10-14.html
Broken Link
Patch
Third Party Advisory
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0464.html
Broken Link
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0470.html
Broken Link
Third Party Advisory
http://www.securityfocus.com/bid/40759
Broken Link
VDB Entry
http://www.securityfocus.com/bid/40808
Broken Link
VDB Entry
http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt
Broken Link
http://www.us-cert.gov/cas/techalerts/TA10-162A.html
Third Party Advisory
US Government Resource
http://www.vupen.com/english/advisories/2010/1421
Broken Link
http://www.vupen.com/english/advisories/2010/1432
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Версия до 9.0.277.0 (исключая)

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Версия от 10.0.0.0 (включая) до 10.1.53.64 (исключая)

Одно из

cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*

Версия до 2.0.2.12610 (исключая)

Одно из

cpe:2.3:a:google:chrome:-:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.05897

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2010-2179

ubuntu

около 16 лет назад

CVE-2010-2179

redhat

около 16 лет назад

GHSA-9q9v-wxmj-6xqx

github

около 4 лет назад

EPSS

Процентиль: 92%

0.05897

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79