Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-3636

Fixed in a distro release EPSS 5%

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.

Published 2010-11-07 · CVE record · OSV

Products: adobe flash_player

Distro releases

ReleasePackageFixed in
Red Hat rhel extras 4flash-plugin0:9.0.289.0-1.el4
Red Hat rhel extras 5flash-plugin0:10.1.102.64-1.el5
Red Hat rhel extras 6flash-plugin0:10.1.102.64-1.el6