CVE-2010-2179: Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or…

PriorityP419medium4.3CVSS 2.0

AVNACMAuNCNIPAN

EPSS

5.90%

92.4th percentile

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to URL parsing.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
adobe	air	< 2.0.2.12610	2.0.2.12610
adobe	flash_player	< 9.0.277.0	9.0.277.0
adobe	flash_player	>= 10.0.0.0 < 10.1.53.64	10.1.53.64

CVSS provenance

nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

vendor_redhat4.3MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.