CVE-2010-2179

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to URL parsing.

• CWE-79

• http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751Third Party Advisory
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlThird Party Advisory
• http://secunia.com/advisories/40144Broken Link
• http://secunia.com/advisories/40545Broken Link
• http://secunia.com/advisories/43026Broken Link
• http://security.gentoo.org/glsa/glsa-201101-09.xmlThird Party Advisory
• http://securitytracker.com/id?1024085Third Party Advisory, VDB Entry
• http://securitytracker.com/id?1024086Broken Link, VDB Entry
• http://support.apple.com/kb/HT4435Broken Link
• http://www.adobe.com/support/security/bulletins/apsb10-14.htmlBroken Link, Patch, Third Party Advisory, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0464.htmlBroken Link, Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0470.htmlBroken Link, Third Party Advisory
• http://www.securityfocus.com/bid/40759Broken Link, VDB Entry
• http://www.securityfocus.com/bid/40808Broken Link, VDB Entry
• http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txtBroken Link
• http://www.us-cert.gov/cas/techalerts/TA10-162A.htmlThird Party Advisory, US Government Resource
• http://www.vupen.com/english/advisories/2010/1421Broken Link
• http://www.vupen.com/english/advisories/2010/1432Broken Link
• http://www.vupen.com/english/advisories/2010/1434Broken Link
• http://www.vupen.com/english/advisories/2010/1453Broken Link
• http://www.vupen.com/english/advisories/2010/1482Broken Link
• http://www.vupen.com/english/advisories/2010/1522Broken Link
• http://www.vupen.com/english/advisories/2010/1793Broken Link
• http://www.vupen.com/english/advisories/2011/0192Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59328Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7126Broken Link
• http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751Third Party Advisory
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.htmlThird Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlThird Party Advisory
• http://secunia.com/advisories/40144Broken Link
• http://secunia.com/advisories/40545Broken Link
• http://secunia.com/advisories/43026Broken Link
• http://security.gentoo.org/glsa/glsa-201101-09.xmlThird Party Advisory
• http://securitytracker.com/id?1024085Third Party Advisory, VDB Entry
• http://securitytracker.com/id?1024086Broken Link, VDB Entry
• http://support.apple.com/kb/HT4435Broken Link
• http://www.adobe.com/support/security/bulletins/apsb10-14.htmlBroken Link, Patch, Third Party Advisory, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0464.htmlBroken Link, Third Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0470.htmlBroken Link, Third Party Advisory
• http://www.securityfocus.com/bid/40759Broken Link, VDB Entry
• http://www.securityfocus.com/bid/40808Broken Link, VDB Entry
• http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txtBroken Link
• http://www.us-cert.gov/cas/techalerts/TA10-162A.htmlThird Party Advisory, US Government Resource
• http://www.vupen.com/english/advisories/2010/1421Broken Link
• http://www.vupen.com/english/advisories/2010/1432Broken Link
• http://www.vupen.com/english/advisories/2010/1434Broken Link
• http://www.vupen.com/english/advisories/2010/1453Broken Link
• http://www.vupen.com/english/advisories/2010/1482Broken Link
• http://www.vupen.com/english/advisories/2010/1522Broken Link
• http://www.vupen.com/english/advisories/2010/1793Broken Link
• http://www.vupen.com/english/advisories/2011/0192Broken Link
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59328Third Party Advisory, VDB Entry
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7126Broken Link

Published

Jun 15, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2173Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…
• CVE-2010-2174Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…
• CVE-2010-2175Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…
• CVE-2010-2176Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…
• CVE-2010-2177Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…
• CVE-2010-2178Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…
• CVE-2010-2180Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…
• CVE-2010-2181Integer overflow in Adobe Flash Player before 9.0.277.0 and …
• CVE-2010-2182Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…
• CVE-2010-2183Integer overflow in Adobe Flash Player before 9.0.277.0 and …
• CVE-2010-2184Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…
• CVE-2010-2185Buffer overflow in Adobe Flash Player before 9.0.277.0 and 1…