Vulnerability in Adobe Flash Player
CVE-2010-3636
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.
EPSS: 0.053 (91.7th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@adobe.com (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
- psirt@adobe.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- psirt@adobe.com (x_refsource_CONFIRM, Third Party Advisory)
- psirt@adobe.com (x_refsource_CONFIRM, Broken Link)
- psirt@adobe.com (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- psirt@adobe.com (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- psirt@adobe.com (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
- psirt@adobe.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@adobe.com (vendor-advisory, x_refsource_APPLE, Mailing List, Third Party Advisory)
- psirt@adobe.com (x_refsource_JVNDB, VDB Entry, Third Party Advisory, third-party-advisory)
Frequently asked questions
- What is CVE-2010-3636?
- CVE-2010-3636 is a vulnerability in Adobe Flash Player, classified under CWE-264. Published 2010-11-07.
- Is CVE-2010-3636 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.