Description
Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | acroread +1 | 9.3.1-1.el5 | RHSA-2010:0114 |
| RHEL 5 | flash-plugin | 10.0.45.2-1.el5 | RHSA-2010:0102 |
| RHEL 4 | acroread +1 | 9.3.1-1.el4 | RHSA-2010:0114 |
| RHEL 4 | flash-plugin | 9.0.262.0-1.el4 | RHSA-2010:0103 |
| RHEL 3 | flash-plugin | 9.0.262.0-1.el3.with.oss | RHSA-2010:0103 |
Advisories 3
- RHSA-2010:0114 Red Hat Security Advisory: acroread security and bug fix update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0102 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0103 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- APPLE-SA-2010-06-15-1 vendor-advisory
- ADV-2011-0192 vdb-entry
- ADV-2010-1481 vdb-entry
- 62300 vdb-entry
- oval:org.mitre.oval:def:8518 vdb-entry signature
- 38198 vdb-entry
- 43026 third-party-advisory
- GLSA-201101-09 vendor-advisory
- RHSA-2010:0102 vendor-advisory
- 1023585 vdb-entry
- RHSA-2010:0114 vendor-advisory
- http://support.apple.com/kb/HT4188
- 40220 third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb10-06.html
- SUSE-SR:2010:006 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=563819
- http://www.adobe.com/support/security/bulletins/apsb10-07.html
- 38547 third-party-advisory
- 38639 third-party-advisory
- RHSA-2010:0103 vendor-advisory
- 38915 third-party-advisory