Home > Vulnerability Database > CVE-2010-2179

Mend.io Vulnerability Database

CVE-2010-2179

Date: June 15, 2010

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to URL parsing.

Severity Score

5.6

Related Resources (31)

Url: http://www.vupen.com/english/advisories/2010/1421

Url: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html

Url: http://www.redhat.com/support/errata/RHSA-2010-0470.html

Url: http://www.vupen.com/english/advisories/2010/1482

Url: http://securitytracker.com/id?1024086

Url: http://securitytracker.com/id?1024085

Url: http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt

Url: http://www.vupen.com/english/advisories/2010/1522

Url: http://www.securityfocus.com/bid/40759

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/59328

Url: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751

Url: http://www.redhat.com/support/errata/RHSA-2010-0464.html

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-2179

Url: http://security.gentoo.org/glsa/glsa-201101-09.xml

Url: http://secunia.com/advisories/43026

Url: http://www.vupen.com/english/advisories/2010/1432

Url: http://www.vupen.com/english/advisories/2010/1793

Url: http://www.vupen.com/english/advisories/2010/1453

Url: http://www.vupen.com/english/advisories/2011/0192

Url: http://www.adobe.com/support/security/bulletins/apsb10-14.html

Url: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

Url: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Url: http://www.us-cert.gov/cas/techalerts/TA10-162A.html

Url: http://www.vupen.com/english/advisories/2010/1434

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7126

Url: http://www.securityfocus.com/bid/40808

Url: http://support.apple.com/kb/HT4435

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2010-2179

Url: http://secunia.com/advisories/40545

Url: http://secunia.com/advisories/40144

Url: https://www.mend.io/vulnerability-database/CVE-2010-2179

Severity Score

5.6

Weakness Type (CWE)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-79

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2010-2179

Date: June 15, 2010

Severity Score

Related Resources (31)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?