Vulnerabilities > CVE-2010-0186 - Unspecified vulnerability in Adobe products

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

adobe

nessus

NVD

Published: 2010-02-15

Updated: 2024-11-21

Summary

Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Flash Player 9.0.125.0 Adobe Flash Player 9.0.48.0 Adobe Flash Player 9.125.0 Adobe Flash Player 8.0.24.0 Adobe Flash Player 10.0.15.3 Adobe Flash Player 6.0.79 Adobe Flash Player 9.0.18D60 Adobe Flash Player 7.1.1 Adobe Flash Player 9.0.124.0 Adobe Flash Player 9.0.47.0 Adobe Flash Player 7.0.63 Adobe Flash Player 7.0.70.0 Adobe Flash Player 10.0.12.36 Adobe Flash Player 8.0.35.0 Adobe Flash Player 9.0.114.0 Adobe Flash Player 9.0.20.0 Adobe Flash Player 9.0.31.0 Adobe Flash Player 8.0.22.0 Adobe Flash Player 9.0.260.0 Adobe Flash Player 9.0.159.0 Adobe Flash Player 9.0.112.0 Adobe Flash Player 9.0.16 Adobe Flash Player - Adobe Flash Player 2 Adobe Flash Player 3 Adobe Flash Player 4 Adobe Flash Player 5 Adobe Flash Player 6 Adobe Flash Player 6.0.21.0 Adobe Flash Player 7 Adobe Flash Player 7.0 Adobe Flash Player 7.0.1 Adobe Flash Player 7.0.14.0 Adobe Flash Player 7.0.19.0 Adobe Flash Player 7.0.24.0 Adobe Flash Player 7.0.25 Adobe Flash Player 7.0.53.0 Adobe Flash Player 7.0.60.0 Adobe Flash Player 7.0.61.0 Adobe Flash Player 7.0.66.0 Adobe Flash Player 7.0.67.0 Adobe Flash Player 7.0.68.0 Adobe Flash Player 7.0.69.0 Adobe Flash Player 7.0.73.0 Adobe Flash Player 7.1 Adobe Flash Player 7.2 Adobe Flash Player 8 Adobe Flash Player 8.0 Adobe Flash Player 8.0.33.0 Adobe Flash Player 8.0.34.0 Adobe Flash Player 8.0.39.0 Adobe Flash Player 8.0.42.0 Adobe Flash Player 9 Adobe Flash Player 9.0 Adobe Flash Player 9.0.8.0 Adobe Flash Player 9.0.9.0 Adobe Flash Player 9.0.16.0 Adobe Flash Player 9.0.20 Adobe Flash Player 9.0.28 Adobe Flash Player 9.0.28.0 Adobe Flash Player 9.0.31 Adobe Flash Player 9.0.45.0 Adobe Flash Player 9.0.115.0 Adobe Flash Player 9.0.151.0 Adobe Flash Player 9.0.152.0 Adobe Flash Player 9.0.155.0 Adobe Flash Player 9.0.246.0 Adobe Flash Player 9.0.262.0 Adobe Flash Player 9.0.277.0 Adobe Flash Player 9.0.280 Adobe Flash Player 9.0.283.0 Adobe Flash Player 9.0.289.0 Adobe Flash Player 10 Adobe Flash Player 10.0.0.584 Adobe Flash Player 10.0.2.54 Adobe Flash Player 10.0.12.10 Adobe Flash Player 10.0.22.87 Adobe Flash Player 10.0.32.18 Adobe Flash Player 10.0.42.34 Adobe Adobe AIR 1.0 Adobe Adobe AIR 1.5.1 Adobe Adobe AIR - Adobe Adobe AIR 1.0.1 Adobe Adobe AIR 1.0.8.4990 Adobe Adobe AIR 1.0.4990 Adobe Adobe AIR 1.1 Adobe Adobe AIR 1.1.0.5790 Adobe Adobe AIR 1.5 Adobe Adobe AIR 1.5.0.7220 Adobe Adobe AIR 1.5.1.8210 Adobe Adobe AIR 1.5.2 Adobe Adobe AIR 1.5.3 Adobe Adobe AIR 1.5.3.9120 Adobe Acrobat 8.0 Adobe Acrobat 8.1.7 Adobe Acrobat 8.1.2 Adobe Acrobat 9.2 Adobe Acrobat 9.1 Adobe Acrobat - Adobe Acrobat 1.0 Adobe Acrobat 2.0 Adobe Acrobat 3.0 Adobe Acrobat 3.1 Adobe Acrobat 4.0 Adobe Acrobat 4.0.5 Adobe Acrobat 4.0.5A Adobe Acrobat 4.0.5C Adobe Acrobat 5.0 Adobe Acrobat 5.0.5 Adobe Acrobat 5.0.6 Adobe Acrobat 5.0.10 Adobe Acrobat 5.1 Adobe Acrobat 6.0 Adobe Acrobat 6.0.1 Adobe Acrobat 6.0.2 Adobe Acrobat 6.0.3 Adobe Acrobat 6.0.4 Adobe Acrobat 6.0.5 Adobe Acrobat 6.0.6 Adobe Acrobat 7 Adobe Acrobat 7.0 Adobe Acrobat 7.0.1 Adobe Acrobat 7.0.2 Adobe Acrobat 7.0.3 Adobe Acrobat 7.0.4 Adobe Acrobat 7.0.5 Adobe Acrobat 7.0.6 Adobe Acrobat 7.0.7 Adobe Acrobat 7.0.8 Adobe Acrobat 7.0.9 Adobe Acrobat 7.1.0 Adobe Acrobat 7.1.1 Adobe Acrobat 7.1.2 Adobe Acrobat 7.1.3 Adobe Acrobat 7.1.4 Adobe Acrobat 8 Adobe Acrobat 8.0.0 Adobe Acrobat 8.1 Adobe Acrobat 8.1.1 Adobe Acrobat 8.1.3 Adobe Acrobat 8.1.4 Adobe Acrobat 8.1.5 Adobe Acrobat 8.1.6 Adobe Acrobat 8.2 Adobe Acrobat 8.2.1 Adobe Acrobat 8.2.2 Adobe Acrobat 8.2.3 Adobe Acrobat 8.2.4 Adobe Acrobat 8.2.5 Adobe Acrobat 8.2.6 Adobe Acrobat 8.3 Adobe Acrobat 8.3.1 Adobe Acrobat 9 Adobe Acrobat 9.0 Adobe Acrobat 9.1.1 Adobe Acrobat 9.1.2 Adobe Acrobat 9.1.3 Adobe Acrobat 9.3 Adobe Acrobat _Reader9.5.3 Adobe Acrobat Reader 8.1.6 Adobe Acrobat Reader 9.2 Adobe Acrobat Reader 9.1 Adobe Acrobat Reader 9.1.3 Adobe Acrobat Reader 8.0 Adobe Acrobat Reader 9.1.2 Adobe Acrobat Reader 8.1.5 Adobe Acrobat Reader 9.1.1 Adobe Acrobat Reader 8.1.7 Adobe Acrobat Reader 8.1.4 Adobe Acrobat Reader 8.1.2 Adobe Acrobat Reader - Adobe Acrobat Reader 3.0 Adobe Acrobat Reader 3.01 Adobe Acrobat Reader 3.02 Adobe Acrobat Reader 4.0 Adobe Acrobat Reader 4.0.5 Adobe Acrobat Reader 4.0.5A Adobe Acrobat Reader 4.0.5C Adobe Acrobat Reader 4.5 Adobe Acrobat Reader 5.0 Adobe Acrobat Reader 5.0.5 Adobe Acrobat Reader 5.0.6 Adobe Acrobat Reader 5.0.7 Adobe Acrobat Reader 5.0.9 Adobe Acrobat Reader 5.0.10 Adobe Acrobat Reader 5.0.11 Adobe Acrobat Reader 5.1 Adobe Acrobat Reader 6.0 Adobe Acrobat Reader 6.0.1 Adobe Acrobat Reader 6.0.2 Adobe Acrobat Reader 6.0.3 Adobe Acrobat Reader 6.0.4 Adobe Acrobat Reader 6.0.5 Adobe Acrobat Reader 7.0 Adobe Acrobat Reader 7.0.1 Adobe Acrobat Reader 7.0.2 Adobe Acrobat Reader 7.0.3 Adobe Acrobat Reader 7.0.4 Adobe Acrobat Reader 7.0.5 Adobe Acrobat Reader 7.0.6 Adobe Acrobat Reader 7.0.7 Adobe Acrobat Reader 7.0.8 Adobe Acrobat Reader 7.0.9 Adobe Acrobat Reader 7.1.0 Adobe Acrobat Reader 7.1.1 Adobe Acrobat Reader 8.1 Adobe Acrobat Reader 8.1.1 Adobe Acrobat Reader 8.1.3 Adobe Acrobat Reader 8.2 Adobe Acrobat Reader 8.2.1 Adobe Acrobat Reader 8.2.2 Adobe Acrobat Reader 8.2.3 Adobe Acrobat Reader 8.2.4 Adobe Acrobat Reader 8.2.6 Adobe Acrobat Reader 8.3 Adobe Acrobat Reader 9.0 Adobe Acrobat Reader 9.3	242

Nessus

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2010-0103.NASL
description	An updated Adobe Flash Player package that fixes a security issue is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having important security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes a vulnerability in Adobe Flash Player. This vulnerability is summarized on the Adobe Security Advisory APSB10-06 page listed in the References section. If a victim loaded a web page containing specially crafted SWF content, it could cause Flash Player to perform unauthorized cross-domain requests, leading to the disclosure of sensitive data. (CVE-2010-0186) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 9.0.262.0.
last seen	2020-06-01
modified	2020-06-02
plugin id	63918
published	2013-01-24
reporter	This script is Copyright (C) 2013-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/63918
title	RHEL 3 / 4 : flash-plugin (RHSA-2010:0103)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_FLASH-PLAYER-100214.NASL
description	The following bug has been fixed : Insufficient checks in flash-player allowed malicious flash applets to create illegal cross-domain requests (CVE-2010-0186). The update also fixes a denial of service condition. (CVE-2010-0187)
last seen	2020-06-01
modified	2020-06-02
plugin id	44639
published	2010-02-17
reporter	This script is Copyright (C) 2010-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/44639
title	SuSE 11 Security Update : flash-player (SAT Patch Number 1977)

NASL family	SuSE Local Security Checks
NASL id	SUSE_FLASH-PLAYER-6845.NASL
description	The following bug has been fixed: Insufficient checks in flash-player allowed malicious flash applets to create illegal cross-domain requests (CVE-2010-0186). The update also fixes a denial of service condition. (CVE-2010-0187)
last seen	2020-06-01
modified	2020-06-02
plugin id	51735
published	2011-01-27
reporter	This script is Copyright (C) 2011-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/51735
title	SuSE 10 Security Update : flash-player (ZYPP Patch Number 6845)

NASL family	Windows
NASL id	ADOBE_AIR_APSB10-06.NASL
description	The remote Windows host contains a version of Adobe AIR that is earlier than 1.5.3.9130 Such versions are potentially affected by multiple vulnerabilities : - An issue that could subvert the domain sandbox and make unauthorized cross-domain requests. (CVE-2010-0186) - An unspecified denial of service. (CVE-2010-0187)
last seen	2020-06-01
modified	2020-06-02
plugin id	44595
published	2010-02-12
reporter	This script is Copyright (C) 2010-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/44595
title	Adobe AIR < 1.5.3.9130 Multiple Vulnerabilities (APSB10-06)

NASL family	SuSE Local Security Checks
NASL id	SUSE_FLASH-PLAYER-6844.NASL
description	The following bug has been fixed: Insufficient checks in flash-player allowed malicious flash applets to create illegal cross-domain requests (CVE-2010-0186). The update also fixes a denial of service condition. (CVE-2010-0187)
last seen	2020-06-01
modified	2020-06-02
plugin id	51734
published	2011-01-27
reporter	This script is Copyright (C) 2011-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/51734
title	SuSE 10 Security Update : flash-player (ZYPP Patch Number 6844)

NASL family	SuSE Local Security Checks
NASL id	SUSE_ACROREAD-6879.NASL
description	This update of acroread fixes : - Cross-domain request vulnerability CVE-2010-0188: CVSS v2 Base Score: 6.8 An unspecified vulnerability that possibly allowed remote code execution. (CVE-2010-0186: CVSS v2 Base Score: 5.8)
last seen	2020-06-01
modified	2020-06-02
plugin id	51697
published	2011-01-27
reporter	This script is Copyright (C) 2011-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/51697
title	SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6879)

NASL family	Windows
NASL id	FLASH_PLAYER_APSB10_06.NASL
description	The remote Windows host contains a version of Adobe Flash Player that is earlier than 10.0.45.2. Such versions are potentially affected by multiple vulnerabilities : - An issue that could subvert the domain sandbox and make unauthorized cross-domain requests. (CVE-2010-0186) - An unspecified denial of service. (CVE-2010-0187)
last seen	2020-06-01
modified	2020-06-02
plugin id	44596
published	2010-02-12
reporter	This script is Copyright (C) 2010-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/44596
title	Flash Player < 10.0.45.2 Multiple Vulnerabilities (APSB10-06)

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2010-0114.NASL
description	Updated acroread packages that fix two security issues and a bug are now available for Red Hat Enterprise Linux 4 Extras and Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. Adobe Reader allows users to view and print documents in Portable Document Format (PDF). This update fixes two vulnerabilities in Adobe Reader. These vulnerabilities are summarized on the Adobe Security Advisory APSB10-07 page listed in the References section. A specially crafted PDF file could cause Adobe Reader to crash or, potentially, execute arbitrary code as the user running Adobe Reader when opened. (CVE-2010-0186, CVE-2010-0188) This update also fixes a bug where, on some systems, attempting to install or upgrade the acroread packages failed due to a package dependency issue. (BZ#557506) All Adobe Reader users should install these updated packages. They contain Adobe Reader version 9.3.1, which is not vulnerable to these issues and fixes this bug. All running instances of Adobe Reader must be restarted for the update to take effect.
last seen	2020-06-01
modified	2020-06-02
plugin id	44665
published	2010-02-19
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/44665
title	RHEL 4 / 5 : acroread (RHSA-2010:0114)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_0_FLASH-PLAYER-100214.NASL
description	Insufficient checks in flash-player allowed malicious flash applets to create illegal cross-domain requests (CVE-2010-0186). The update also fixes a denial of service condition (CVE-2010-0187).
last seen	2020-06-01
modified	2020-06-02
plugin id	44636
published	2010-02-17
reporter	This script is Copyright (C) 2010-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/44636
title	openSUSE Security Update : flash-player (flash-player-1970)

NASL family	FreeBSD Local Security Checks
NASL id	FREEBSD_PKG_FF6519AD18E511DF9BDD001B2134EF46.NASL
description	Adobe Product Security Incident Response Team reports : A critical vulnerability has been identified in Adobe Flash Player version 10.0.42.34 and earlier. This vulnerability (CVE-2010-0186) could subvert the domain sandbox and make unauthorized cross-domain requests. This update also resolves a potential Denial of Service issue (CVE-2010-0187).
last seen	2020-06-01
modified	2020-06-02
plugin id	44602
published	2010-02-15
reporter	This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/44602
title	FreeBSD : linux-flashplugin -- multiple vulnerabilities (ff6519ad-18e5-11df-9bdd-001b2134ef46)

NASL family	SuSE Local Security Checks
NASL id	SUSE_ACROREAD-6881.NASL
description	This update of acroread fixes : - Cross-domain request vulnerability CVE-2010-0188: CVSS v2 Base Score: 6.8 An unspecified vulnerability that possibly allowed remote code execution. (CVE-2010-0186: CVSS v2 Base Score: 5.8)
last seen	2020-06-01
modified	2020-06-02
plugin id	51698
published	2011-01-27
reporter	This script is Copyright (C) 2011-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/51698
title	SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 6881)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_2_FLASH-PLAYER-100214.NASL
description	Insufficient checks in flash-player allowed malicious flash applets to create illegal cross-domain requests (CVE-2010-0186). The update also fixes a denial of service condition (CVE-2010-0187).
last seen	2020-06-01
modified	2020-06-02
plugin id	44638
published	2010-02-17
reporter	This script is Copyright (C) 2010-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/44638
title	openSUSE Security Update : flash-player (flash-player-1970)

NASL family	MacOS X Local Security Checks
NASL id	MACOSX_10_6_4.NASL
description	The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.4. Mac OS X 10.6.4 contains security fixes for the following components : - CUPS - DesktopServices - Flash Player plug-in - Folder Manager - Help Viewer - iChat - ImageIO - Kerberos - Kernel - libcurl - Network Authorization - Open Directory - Printer Setup - Printing - Ruby - SMB File Server - SquirrelMail - Wiki Server
last seen	2020-06-01
modified	2020-06-02
plugin id	47023
published	2010-06-15
reporter	This script is Copyright (C) 2010-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/47023
title	Mac OS X 10.6.x < 10.6.4 Multiple Vulnerabilities

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_1_FLASH-PLAYER-100214.NASL
description	Insufficient checks in flash-player allowed malicious flash applets to create illegal cross-domain requests (CVE-2010-0186). The update also fixes a denial of service condition (CVE-2010-0187).
last seen	2020-06-01
modified	2020-06-02
plugin id	44637
published	2010-02-17
reporter	This script is Copyright (C) 2010-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/44637
title	openSUSE Security Update : flash-player (flash-player-1970)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_2_ACROREAD-100225.NASL
description	This update of acroread fixes : - CVE-2010-0186: CVSS v2 Base Score: 5.8 Cross-domain request vulnerability - CVE-2010-0188: CVSS v2 Base Score: 6.8 An unspecified vulnerability that possibly allowed remote code execution.
last seen	2020-06-01
modified	2020-06-02
plugin id	44981
published	2010-03-04
reporter	This script is Copyright (C) 2010-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/44981
title	openSUSE Security Update : acroread (acroread-2068)

NASL family	Gentoo Local Security Checks
NASL id	GENTOO_GLSA-201101-09.NASL
description	The remote host is affected by the vulnerability described in GLSA-201101-09 (Adobe Flash Player: Multiple vulnerabilities) Multiple vulnerabilities were discovered in Adobe Flash Player. For further information please consult the CVE entries and the Adobe Security Bulletins referenced below. Impact : A remote attacker could entice a user to open a specially crafted SWF file, possibly resulting in the execution of arbitrary code with the privileges of the user running the application, or a Denial of Service. Workaround : There is no known workaround at this time.
last seen	2020-06-01
modified	2020-06-02
plugin id	51658
published	2011-01-24
reporter	This script is Copyright (C) 2011-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/51658
title	GLSA-201101-09 : Adobe Flash Player: Multiple vulnerabilities

NASL family	Red Hat Local Security Checks
NASL id	REDHAT-RHSA-2010-0102.NASL
description	An updated Adobe Flash Player package that fixes two security issues is now available for Red Hat Enterprise Linux 5 Supplementary. This update has been rated as having important security impact by the Red Hat Security Response Team. The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. This update fixes two vulnerabilities in Adobe Flash Player. These vulnerabilities are summarized on the Adobe Security Advisory APSB10-06 page listed in the References section. If a victim loaded a web page containing specially crafted SWF content, it could cause Flash Player to perform unauthorized cross-domain requests, leading to the disclosure of sensitive data. (CVE-2010-0186, CVE-2010-0187) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 10.0.45.2.
last seen	2020-06-01
modified	2020-06-02
plugin id	63917
published	2013-01-24
reporter	This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
source	https://www.tenable.com/plugins/nessus/63917
title	RHEL 5 : flash-plugin (RHSA-2010:0102)

NASL family	Windows
NASL id	ADOBE_READER_APSB10-07.NASL
description	The version of Adobe Reader installed on the remote host is earlier than 9.3.1 / 8.2.1. As such, it is reportedly affected by multiple vulnerabilities : - An issue that could subvert the domain sandbox and make unauthorized cross-domain requests. (CVE-2010-0186) - An unspecified vulnerability could cause the application to crash or possibly lead to arbitrary code execution. (CVE-2010-0188)
last seen	2020-06-01
modified	2020-06-02
plugin id	44644
published	2010-02-17
reporter	This script is Copyright (C) 2010-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/44644
title	Adobe Reader < 9.3.1 / 8.2.1 Multiple Vulnerabilities (APSB10-07)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_ACROREAD-100225.NASL
description	This update of acroread fixes : - Cross-domain request vulnerability. (CVE-2010-0186 : CVSS v2 Base Score: 5.8) - An unspecified vulnerability that possibly allowed remote code execution. (CVE-2010-0188 : CVSS v2 Base Score: 6.8)
last seen	2020-06-01
modified	2020-06-02
plugin id	44984
published	2010-03-04
reporter	This script is Copyright (C) 2010-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/44984
title	SuSE 11 Security Update : Acrobat Reader (SAT Patch Number 2065)

NASL family	MacOS X Local Security Checks
NASL id	MACOSX_SECUPD2010-004.NASL
description	The remote host is running a version of Mac OS X 10.5 that does not have Security Update 2010-004 applied. This security update contains fixes for the following components : - CUPS - DesktopServices - Flash Player plug-in - Folder Manager - iChat - ImageIO - Kerberos - Kernel - libcurl - Network Authorization - Ruby - SMB File Server - SquirrelMail - Wiki Server
last seen	2020-06-01
modified	2020-06-02
plugin id	47024
published	2010-06-15
reporter	This script is Copyright (C) 2010-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/47024
title	Mac OS X Multiple Vulnerabilities (Security Update 2010-004)

NASL family	Gentoo Local Security Checks
NASL id	GENTOO_GLSA-201009-05.NASL
description	The remote host is affected by the vulnerability described in GLSA-201009-05 (Adobe Reader: Multiple vulnerabilities) Multiple vulnerabilities were discovered in Adobe Reader. For further information please consult the CVE entries and the Adobe Security Bulletins referenced below. Impact : A remote attacker might entice a user to open a specially crafted PDF file, possibly resulting in the execution of arbitrary code with the privileges of the user running the application, or bypass intended sandbox restrictions, make cross-domain requests, inject arbitrary web script or HTML, or cause a Denial of Service condition. Workaround : There is no known workaround at this time.
last seen	2020-06-01
modified	2020-06-02
plugin id	49126
published	2010-09-08
reporter	This script is Copyright (C) 2010-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/49126
title	GLSA-201009-05 : Adobe Reader: Multiple vulnerabilities

NASL family	Windows
NASL id	ADOBE_ACROBAT_APSB10-07.NASL
description	The version of Adobe Acrobat installed on the remote host is earlier than 9.3.1 / 8.2.1. Such versions are reportedly affected by multiple vulnerabilities : - An issue that could subvert the domain sandbox and make unauthorized cross-domain requests. (CVE-2010-0186) - An unspecified vulnerability could cause the application to crash or possibly lead to arbitrary code execution. (CVE-2010-0188)
last seen	2020-06-01
modified	2020-06-02
plugin id	44643
published	2010-02-17
reporter	This script is Copyright (C) 2010-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/44643
title	Adobe Acrobat < 9.3.1 / 8.2.1 Multiple Vulnerabilities (APSB10-07)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_1_ACROREAD-100225.NASL
description	This update of acroread fixes : - CVE-2010-0186: CVSS v2 Base Score: 5.8 Cross-domain request vulnerability - CVE-2010-0188: CVSS v2 Base Score: 6.8 An unspecified vulnerability that possibly allowed remote code execution.
last seen	2020-06-01
modified	2020-06-02
plugin id	44978
published	2010-03-04
reporter	This script is Copyright (C) 2010-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/44978
title	openSUSE Security Update : acroread (acroread-2068)

NASL family	SuSE Local Security Checks
NASL id	SUSE_11_0_ACROREAD-100225.NASL
description	This update of acroread fixes : - CVE-2010-0186: CVSS v2 Base Score: 5.8 Cross-domain request vulnerability - CVE-2010-0188: CVSS v2 Base Score: 6.8 An unspecified vulnerability that possibly allowed remote code execution.
last seen	2020-06-01
modified	2020-06-02
plugin id	44975
published	2010-03-04
reporter	This script is Copyright (C) 2010-2019 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/44975
title	openSUSE Security Update : acroread (acroread-2068)

Oval

accepted

2015-08-03T04:02:08.790-04:00

class

vulnerability

contributors

name J. Daniel Brown
organization DTCC
name Jeff Cockerill
organization G2, Inc.
name Jeff Cockerill
organization G2, Inc.
name SecPod Team
organization SecPod Technologies
name SecPod Team
organization SecPod Technologies
name Shane Shaffer
organization G2, Inc.
name Shane Shaffer
organization G2, Inc.
name Sergey Artykhov
organization ALTX-SOFT
name Sergey Artykhov
organization ALTX-SOFT
name Shane Shaffer
organization G2, Inc.
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Kedovskaya
organization ALTX-SOFT
name Maria Mikhno
organization ALTX-SOFT
name Maria Mikhno
organization ALTX-SOFT
name Maria Mikhno
organization ALTX-SOFT

definition_extensions

comment Adobe AIR is installed
oval oval:org.mitre.oval:def:7479
comment Adobe Flash Player is installed
oval oval:org.mitre.oval:def:6700
comment Adobe Reader 8 Series is installed
oval oval:org.mitre.oval:def:6390
comment Adobe Reader 9 Series is installed
oval oval:org.mitre.oval:def:6523
comment Adobe Acrobat 8 Series is installed
oval oval:org.mitre.oval:def:6452
comment Adobe Acrobat 9 Series is installed
oval oval:org.mitre.oval:def:6013
comment ActiveX Control is installed
oval oval:org.mitre.oval:def:26707

description

family

windows

oval:org.mitre.oval:def:8518

status

accepted

submitted

2010-02-14T12:00:00.000-05:00

title

Adobe Flash Player, Acrobat, Adobe Reader and AIR Cross Domain Request Vulnerability

version

Redhat

advisories

rhsa
id RHSA-2010:0102
rhsa
id RHSA-2010:0103
rhsa
id RHSA-2010:0114

rpms

flash-plugin-0:10.0.45.2-1.el5
flash-plugin-0:9.0.262.0-1.el3.with.oss
flash-plugin-0:9.0.262.0-1.el4
acroread-0:9.3.1-1.el4
acroread-0:9.3.1-1.el5
acroread-plugin-0:9.3.1-1.el4
acroread-plugin-0:9.3.1-1.el5

Summary

Vulnerable Configurations

Nessus

Oval

Redhat

References