{"schemaVersion":3,"id":"CVE-2010-2179","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to URL parsing.","dates":{"published":"2010-06-15T17:48:00.000Z","modified":"2024-08-07T02:25:07.020Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":4.3,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.05897,"percentile":0.9315,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.05897},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05897,"percentile":0.9315}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.05897,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.05897,"percentile":0.9315}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"adobe","product":"air","name":"air","label":"air","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.0.2.12610","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.2.12610","eol":null,"hubHref":"/vendor/adobe/air"},{"vendor":"adobe","product":"flash_player","name":"Flash Player","label":"flash_player","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 9.0.277.0","noFixRecorded":false,"fixedIn":null},{"text":"≥ 10.0.0.0, < 10.1.53.64","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.277.0 | ≥ 10.0.0.0, < 10.1.53.64","eol":null,"hubHref":"/vendor/adobe/flash_player"}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/59328","label":"exchange.xforce.ibmcloud.com/vulnerabilities/59328","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0192","label":"www.vupen.com/english/advisories/2011/0192","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1421","label":"www.vupen.com/english/advisories/2010/1421","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://support.apple.com/kb/HT4435","label":"support.apple.com/kb/HT4435","hostname":"support.apple.com","tags":["X Refsource CONFIRM","Broken Link"]},{"url":"http://secunia.com/advisories/40545","label":"secunia.com/advisories/40545","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0464.html","label":"www.redhat.com/support/errata/RHSA-2010-0464.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1793","label":"www.vupen.com/english/advisories/2010/1793","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://secunia.com/advisories/43026","label":"secunia.com/advisories/43026","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1432","label":"www.vupen.com/english/advisories/2010/1432","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://security.gentoo.org/glsa/glsa-201101-09.xml","label":"security.gentoo.org/glsa/glsa-201101-09.xml","hostname":"security.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Third Party Advisory"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA10-162A.html","label":"www.us-cert.gov/cas/techalerts/TA10-162A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7126","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7126","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL","Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","label":"lists.apple.com/archives/security-announce/2010//Nov/msg00000.html","hostname":"lists.apple.com","tags":["Vendor Advisory","X Refsource APPLE","Mailing List","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/40759","label":"www.securityfocus.com/bid/40759","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link"]},{"url":"http://securitytracker.com/id?1024085","label":"securitytracker.com/id?1024085","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","label":"lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Third Party Advisory"]},{"url":"http://securitytracker.com/id?1024086","label":"securitytracker.com/id?1024086","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1434","label":"www.vupen.com/english/advisories/2010/1434","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt","label":"www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt","hostname":"www.turbolinux.co.jp","tags":["Vendor Advisory","X Refsource TURBO","Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","label":"itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","hostname":"itrc.hp.com","tags":["Vendor Advisory","X Refsource HP","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html","label":"lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Third Party Advisory"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb10-14.html","label":"www.adobe.com/support/security/bulletins/apsb10-14.html","hostname":"www.adobe.com","tags":["X Refsource CONFIRM","Broken Link","Patch","Third Party Advisory","Vendor Advisory"]},{"url":"http://secunia.com/advisories/40144","label":"secunia.com/advisories/40144","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0470.html","label":"www.redhat.com/support/errata/RHSA-2010-0470.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1482","label":"www.vupen.com/english/advisories/2010/1482","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1522","label":"www.vupen.com/english/advisories/2010/1522","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]},{"url":"http://www.securityfocus.com/bid/40808","label":"www.securityfocus.com/bid/40808","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1453","label":"www.vupen.com/english/advisories/2010/1453","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link"]}],"lineage":{"upstream":[],"downstream":["RHSA-2010:0464","RHSA-2010:0470"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2010-06-15T17:48:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T02:25:07.020Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":18,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T07:23:02.932Z","stale":false,"partial":false}}