Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-3636

Опубликовано: 07 нояб. 2010
Источник: nvd
CVSS2: 9.3
EPSS Низкий

Описание

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Версия от 9.0 (включая) до 9.0.289.0 (исключая)
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Версия от 10.0 (включая) до 10.1.102.64 (исключая)

Одно из

cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:sun:solaris:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Версия до 10.1.95.1 (включая)
cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

EPSS

Процентиль: 84%
0.02261
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-264

Связанные уязвимости

ubuntu логотип

CVE-2010-3636

ubuntu
около 15 лет назад

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.

redhat логотип

CVE-2010-3636

redhat
больше 15 лет назад

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.

github логотип

GHSA-r3hm-9frm-fwcf

github
больше 3 лет назад

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.

EPSS

Процентиль: 84%
0.02261
Низкий

9.3 Critical

CVSS2

Дефекты

CWE-264