CVE ID:	CVE-2010-2179
Description:	Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when Firefox or Chrome is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to URL parsing.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-2179 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html BugTraq ID: 40759 http://www.securityfocus.com/bid/40759 BugTraq ID: 40808 http://www.securityfocus.com/bid/40808 Cert/CC Advisory: TA10-162A http://www.us-cert.gov/cas/techalerts/TA10-162A.html http://security.gentoo.org/glsa/glsa-201101-09.xml HPdes Security Advisory: HPSBMA02547 http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 HPdes Security Advisory: SSRT100179 http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7126 RedHat Security Advisories: RHSA-2010:0464 http://www.redhat.com/support/errata/RHSA-2010-0464.html RedHat Security Advisories: RHSA-2010:0470 http://www.redhat.com/support/errata/RHSA-2010-0470.html http://securitytracker.com/id?1024085 http://securitytracker.com/id?1024086 http://secunia.com/advisories/40144 http://secunia.com/advisories/40545 http://secunia.com/advisories/43026 SuSE Security Announcement: SUSE-SA:2010:024 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html SuSE Security Announcement: SUSE-SR:2010:013 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html TurboLinux Advisory: TLSA-2010-19 http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt http://www.vupen.com/english/advisories/2010/1421 http://www.vupen.com/english/advisories/2010/1432 http://www.vupen.com/english/advisories/2010/1434 http://www.vupen.com/english/advisories/2010/1453 http://www.vupen.com/english/advisories/2010/1482 http://www.vupen.com/english/advisories/2010/1522 http://www.vupen.com/english/advisories/2010/1793 http://www.vupen.com/english/advisories/2011/0192 XForce ISS Database: adobe-player-air-url-xss(59328) https://exchange.xforce.ibmcloud.com/vulnerabilities/59328