CVE-2010-3636

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.

• CWE-264

• http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1Broken Link
• http://jvn.jp/en/jp/JVN48425028/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000054.htmlThird Party Advisory, VDB Entry
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.htmlThird Party Advisory
• http://marc.info/?l=bugtraq&m=130331642631603&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/42183Third Party Advisory
• http://secunia.com/advisories/42926Third Party Advisory
• http://secunia.com/advisories/43026Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201101-09.xmlThird Party Advisory
• http://support.apple.com/kb/HT4435Third Party Advisory
• http://www.adobe.com/support/security/bulletins/apsb10-26.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0829.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0834.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0867.htmlThird Party Advisory
• http://www.securityfocus.com/bid/44691Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2010/2903Third Party Advisory
• http://www.vupen.com/english/advisories/2010/2906Third Party Advisory
• http://www.vupen.com/english/advisories/2010/2918Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0173Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0192Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12142Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15913Third Party Advisory
• http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1Broken Link
• http://jvn.jp/en/jp/JVN48425028/index.htmlThird Party Advisory, VDB Entry
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000054.htmlThird Party Advisory, VDB Entry
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.htmlThird Party Advisory
• http://marc.info/?l=bugtraq&m=130331642631603&w=2Mailing List, Third Party Advisory
• http://secunia.com/advisories/42183Third Party Advisory
• http://secunia.com/advisories/42926Third Party Advisory
• http://secunia.com/advisories/43026Third Party Advisory
• http://security.gentoo.org/glsa/glsa-201101-09.xmlThird Party Advisory
• http://support.apple.com/kb/HT4435Third Party Advisory
• http://www.adobe.com/support/security/bulletins/apsb10-26.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0829.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0834.htmlThird Party Advisory
• http://www.redhat.com/support/errata/RHSA-2010-0867.htmlThird Party Advisory
• http://www.securityfocus.com/bid/44691Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2010/2903Third Party Advisory
• http://www.vupen.com/english/advisories/2010/2906Third Party Advisory
• http://www.vupen.com/english/advisories/2010/2918Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0173Third Party Advisory
• http://www.vupen.com/english/advisories/2011/0192Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12142Third Party Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15913Third Party Advisory

Published

Nov 7, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-3630Unspecified vulnerability in Adobe Reader and Acrobat 9.x be…
• CVE-2010-3631Array index error in Adobe Reader and Acrobat 8.x before 8.2…
• CVE-2010-3632Adobe Reader and Acrobat 9.x before 9.4, and 8.x before 8.2.…
• CVE-2010-3633Memory leak in Adobe Flash Media Server (FMS) 3.0.x before 3…
• CVE-2010-3634Unspecified vulnerability in the edge process in Adobe Flash…
• CVE-2010-3635Adobe Flash Media Server (FMS) 3.0.x before 3.0.7, 3.5.x bef…
• CVE-2010-3637An unspecified ActiveX control in Adobe Flash Player before …
• CVE-2010-3638Unspecified vulnerability in Adobe Flash Player before 9.0.2…
• CVE-2010-3639Unspecified vulnerability in Adobe Flash Player before 9.0.2…
• CVE-2010-3640Unspecified vulnerability in Adobe Flash Player before 9.0.2…
• CVE-2010-3641Unspecified vulnerability in Adobe Flash Player before 9.0.2…
• CVE-2010-3642Unspecified vulnerability in Adobe Flash Player before 9.0.2…