Orange Business Services
Vigil@nce Vigil@nce Vigil@nce
we track for your security since 1999
 home presentation vulnerabilities documentation contact  
subscriber area subscriber area
free access free access
Vigil@nce team describes computer vulnerabilities impacting your systems, and offers solutions to correct them.
recent vulnerabilities recent vulnerabilities
tracked products tracked products
RSS feed RSS feed
vulnerability

vulnerability CVE-2010-0186 CVE-2010-0187

Adobe Flash: two vulnerabilities

Synthesis of the vulnerability

An attacker can use two Adobe Flash vulnerabilities, in order to access to a domain, or to generate a denial of service.
Severity: 3/4.
Creation date: 12/02/2010.

Description of the vulnerability

Two vulnerabilities were announced in Adobe Flash.

A Flash application, which can be included in a pdf document, can query a domain different from its origin domain. [severity:3/4; BID-38198, CVE-2010-0186, >]

An attacker can generate a denial of service. [severity:1/4; BID-38200, CVE-2010-0187, >]

An attacker can therefore use two Adobe Flash vulnerabilities, in order to access to a domain, or to generate a denial of service.

Complete Vigil@nce bulletin

Access to the complete Vigil@nce bulletin

Characteristics

Title: Adobe Flash: two vulnerabilities.
Keywords: Adobe Flash vulnerabilities.
Identifiers: APSB10-06, BID-38198, BID-38200, CVE-2010-0186, CVE-2010-0187, RHSA-2010:0102-01, RHSA-2010:0103-01, SUSE-SR:2010:004, SUSE-SR:2010:006, VIGILANCE-VUL-9445.

Information sources

Publications and announces
Source example: Security update available for Adobe Flash Player

Solutions for this vulnerability

Patch or workaround

Supplements

Vulnerability : CVE-2010-0186

A Flash application, which can be included in a pdf document, can query a domain different from its origin domain.
Severity: 3/4.
Identifiers: BID-38198, CVE-2010-0186.
Publications and announces
Source example: Neat, New, and Ridiculous Flash Hacks

Vulnerability : CVE-2010-0187

An attacker can generate a denial of service.
Severity: 1/4.
Identifiers: BID-38200, CVE-2010-0187.

Computer vulnerabilities tracking service

The Vigil@nce computer vulnerability tracking service alerts your teams of vulnerabilities or threats impacting your information system.
The Vigil@nce vulnerability database contains several thousand vulnerabilities.
This bulletin is published by the Vigil@nce team, which tracks computer vulnerabilities impacting systems and applications.
Computer applications vulnerability



















France Télécom Copyright 1999-2010 Vigil@nce. Vigil@nce is a service from Orange Business Services. Site map. Legal notice. Version française