CVE-2010-0187 :: Enginsight Vulnerability Database

Severity

UNKNOWN

AV:N/AC:M/Au:N/C:N/I:N/A:P

Atk. Vector

NETWORK

Atk. Complexity

MEDIUM

Base Score

CVSS 3.x

EPSS Score

Percentile: 98%

Vendor	Product	Version
adobe	adobe_air	𝑥 ≤ 1.5.3.9120
adobe	adobe_air	1.0
adobe	adobe_air	1.1
adobe	adobe_air	1.5.1
adobe	adobe_air	1.5.2
adobe	adobe_air	1.5.3
adobe	flash_player	𝑥 ≤ 10.0.42.34
adobe	flash_player	6.0.21.0
adobe	flash_player	6.0.79
adobe	flash_player	7.0
adobe	flash_player	7.0.1
adobe	flash_player	7.0.25
adobe	flash_player	7.0.63
adobe	flash_player	7.0.69.0
adobe	flash_player	7.0.70.0
adobe	flash_player	7.1
adobe	flash_player	7.1.1
adobe	flash_player	7.2
adobe	flash_player	8.0
adobe	flash_player	8.0.22.0
adobe	flash_player	8.0.24.0
adobe	flash_player	8.0.33.0
adobe	flash_player	8.0.34.0
adobe	flash_player	8.0.35.0
adobe	flash_player	8.0.39.0
adobe	flash_player	8.0.42.0
adobe	flash_player	9.0
adobe	flash_player	9.0.16
adobe	flash_player	9.0.18d60
adobe	flash_player	9.0.20
adobe	flash_player	9.0.20.0
adobe	flash_player	9.0.28.0
adobe	flash_player	9.0.31
adobe	flash_player	9.0.31.0
adobe	flash_player	9.0.45.0
adobe	flash_player	9.0.47.0
adobe	flash_player	9.0.48.0
adobe	flash_player	9.0.112.0
adobe	flash_player	9.0.114.0
adobe	flash_player	9.0.115.0
adobe	flash_player	9.0.124.0
adobe	flash_player	9.0.125.0
adobe	flash_player	9.0.151.0
adobe	flash_player	9.0.152.0
adobe	flash_player	9.0.159.0
adobe	flash_player	9.0.246.0
adobe	flash_player	9.0.260.0
adobe	flash_player	9.125.0
adobe	flash_player	10.0.12.10
adobe	flash_player	10.0.12.36
adobe	flash_player	10.0.15.3
adobe	flash_player	10.0.22.87
adobe	flash_player	10.0.32.18

𝑥

= Vulnerable software versions

Ubuntu Releases

Ubuntu Product

Codename

adobe-flashplugin

karmic	Fixed 10.0.45.2-1karmic1 released
jaunty	Fixed 10.0.45.2-1jaunty1 released
intrepid	Fixed 10.0.45.2-1intrepid1 released
hardy	Fixed 10.0.45.2-1 released
dapper	dne

flashplugin-nonfree

karmic	Fixed 10.0.45.2ubuntu0.9.10.1 released
jaunty	Fixed 10.0.45.2ubuntu0.9.04.1 released
intrepid	Fixed 10.0.45.2ubuntu0.8.10.1 released
hardy	Fixed 10.0.1.218+really9.0.262.0ubuntu1 released
dapper	ignored

Known Exploits!

http://www.exploit-db.com/exploits/11182

Common Weakness Enumeration

CWE-94 - Improper Control of Generation of Code ('Code Injection')
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References

http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html

http://sebug.net/exploit/18967/

http://secunia.com/advisories/38547

http://secunia.com/advisories/38915

http://secunia.com/advisories/40220

http://secunia.com/advisories/43026

http://security.gentoo.org/glsa/glsa-201101-09.xml

http://securitytracker.com/id?1023585

http://support.apple.com/kb/HT4188

http://www.adobe.com/support/security/bulletins/apsb10-06.html

http://www.exploit-db.com/exploits/11182

http://www.securityfocus.com/bid/38200

http://www.vupen.com/english/advisories/2010/1481

http://www.vupen.com/english/advisories/2011/0192

https://bugzilla.redhat.com/show_bug.cgi?id=564287

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16125

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8393

https://rhn.redhat.com/errata/RHSA-2010-0102.html