NetSight
medium6.8

CVE-2010-0186

Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.…

Impact

Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.

Affected products

VendorProductAffected versions
AdobeAdobe Air
through 1.5.3.9120
Versions 1.0, 1.1, 1.5.1, 1.5.2, 1.5.3
AdobeFlash Player
through 10.0.42.34
Versions 6.0.21.0, 6.0.79, 7.0, 7.0.1, 7.0.25
AdobeAcrobat
through 9.3
Versions 8.0, 8.1, 8.1.1, 8.1.2, 8.1.3
AdobeAcrobat Reader
through 9.3
Versions 8.0, 8.1, 8.1.1, 8.1.2, 8.1.4

References