| Vulnerability Name: | CVE-2010-3636 (CCN-63026) | ||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2010-11-04 | ||||||||||||||||||||||||||||||||||||||||
| Published: | 2010-11-04 | ||||||||||||||||||||||||||||||||||||||||
| Updated: | 2019-10-09 | ||||||||||||||||||||||||||||||||||||||||
| Summary: | Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors. | ||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
| ||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C) 6.9 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
5.0 Medium (REDHAT Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-264 | ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Bypass Security | ||||||||||||||||||||||||||||||||||||||||
| References: | Source: CCN Type: Sun Blog, 18 Jan 2011 Multiple Vulnerabilities in Adobe Flash Player Source: CONFIRM Type: Broken Link http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1 Source: MITRE Type: CNA CVE-2010-3636 Source: JVN Type: Third Party Advisory, VDB Entry JVN#48425028 Source: JVNDB Type: Third Party Advisory, VDB Entry JVNDB-2010-000054 Source: APPLE Type: Mailing List, Third Party Advisory APPLE-SA-2010-11-10-1 Source: SUSE Type: Third Party Advisory SUSE-SA:2010:055 Source: HP Type: Mailing List, Third Party Advisory SSRT100428 Source: CCN Type: RHSA-2010-0829 Critical: flash-plugin security update Source: CCN Type: RHSA-2010-0834 Critical: flash-plugin security update Source: CCN Type: RHSA-2010-0867 Critical: flash-plugin security update Source: SECUNIA Type: Third Party Advisory 42183 Source: CCN Type: SA42926 Oracle Solaris Adobe Flash Player Multiple Vulnerabilities Source: SECUNIA Type: Third Party Advisory 42926 Source: SECUNIA Type: Third Party Advisory 43026 Source: GENTOO Type: Third Party Advisory GLSA-201101-09 Source: CONFIRM Type: Third Party Advisory http://support.apple.com/kb/HT4435 Source: CCN Type: Adobe Product Security Bulletin APSB10-26 Security update available for Adobe Flash Player Source: CONFIRM Type: Patch, Vendor Advisory http://www.adobe.com/support/security/bulletins/apsb10-26.html Source: CCN Type: GLSA-201101-09 Adobe Flash Player: Multiple vulnerabilities Source: CCN Type: OSVDB ID: 69146 Adobe Flash Unspecified Cross-Domain Policy Bypass (2010-3636) Source: REDHAT Type: Third Party Advisory RHSA-2010:0829 Source: REDHAT Type: Third Party Advisory RHSA-2010:0834 Source: REDHAT Type: Third Party Advisory RHSA-2010:0867 Source: BID Type: Third Party Advisory, VDB Entry 44691 Source: CCN Type: BID-44691 Adobe Flash Player CVE-2010-3636 Policy File Cross Domain Security Bypass Vulnerability Source: VUPEN Type: Third Party Advisory ADV-2010-2903 Source: VUPEN Type: Third Party Advisory ADV-2010-2906 Source: VUPEN Type: Third Party Advisory ADV-2010-2918 Source: VUPEN Type: Third Party Advisory ADV-2011-0173 Source: VUPEN Type: Third Party Advisory ADV-2011-0192 Source: XF Type: UNKNOWN flash-crossdomain-securitypol-sec-bypass(63026) Source: OVAL Type: Third Party Advisory oval:org.mitre.oval:def:12142 Source: OVAL Type: Third Party Advisory oval:org.mitre.oval:def:15913 Source: SUSE Type: SUSE-SA:2010:055 Adobe Flash Player security problems | ||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration RedHat 1: Configuration RedHat 2: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||