CVE:CVE-2010-0186
CNNVD:CNNVD-201002-145
Adobe Flash Player是美国奥多比（Adobe）公司的一款跨平台、基于浏览器的多媒体播放器产品。该产品支持跨屏幕和浏览器查看应用程序、内容和视频。Adobe Reader和Acrobat都是美国奥多比（Adobe）公司的产品。Adobe Reader是一款免费的PDF文件阅读器，Acrobat是一款PDF文件编辑和转换工具。
Adobe Flash Player 10.0.45.2之前版本，Adobe AIR 1.5.3.9130之前版本，以及Adobe Reader和Acrobat 8.2.1之前的8.x和9.3.1之前的9.x版本中存在跨域漏洞。远程攻击者可借助未明向量绕过沙盒限制，并导致产生跨域请求。
solution:Upgrade adobe adobe_air to a higher version than 1.5.3.9120,1.0,1.1,1.5.1,1.5.2,1.5.3,and avoid the version (,1.5.3.9120],1.0,1.1,1.5.1,1.5.2,1.5.3; Upgrade adobe flash_player to a higher version than 10.0.42.34,6.0.21.0,6.0.79,7.0,7.0.1,7.0.25,7.0.63,7.0.69.0,7.0.70.0,7.1,7.1.1,7.2,8.0,8.0.22.0,8.0.24.0,8.0.33.0,8.0.34.0,8.0.35.0,8.0.39.0,8.0.42.0,9.0,9.0.16,9.0.18d60,9.0.20,9.0.20.0,9.0.28.0,9.0.31,9.0.31.0,9.0.45.0,9.0.47.0,9.0.48.0,9.0.112.0,9.0.114.0,9.0.115.0,9.0.124.0,9.0.125.0,9.0.151.0,9.0.152.0,9.0.159.0,9.0.246.0,9.0.260.0,9.125.0,10.0.12.10,10.0.12.36,10.0.15.3,10.0.22.87,10.0.32.18,and avoid the version (,10.0.42.34],6.0.21.0,6.0.79,7.0,7.0.1,7.0.25,7.0.63,7.0.69.0,7.0.70.0,7.1,7.1.1,7.2,8.0,8.0.22.0,8.0.24.0,8.0.33.0,8.0.34.0,8.0.35.0,8.0.39.0,8.0.42.0,9.0,9.0.16,9.0.18d60,9.0.20,9.0.20.0,9.0.28.0,9.0.31,9.0.31.0,9.0.45.0,9.0.47.0,9.0.48.0,9.0.112.0,9.0.114.0,9.0.115.0,9.0.124.0,9.0.125.0,9.0.151.0,9.0.152.0,9.0.159.0,9.0.246.0,9.0.260.0,9.125.0,10.0.12.10,10.0.12.36,10.0.15.3,10.0.22.87,10.0.32.18; Upgrade adobe acrobat to a higher version than 9.3,8.0,8.1,8.1.1,8.1.2,8.1.3,8.1.4,8.1.5,8.1.6,8.1.7,9.0,9.1,9.1.1,9.1.2,9.1.3,9.2,and avoid the version (,9.3],8.0,8.1,8.1.1,8.1.2,8.1.3,8.1.4,8.1.5,8.1.6,8.1.7,9.0,9.1,9.1.1,9.1.2,9.1.3,9.2; Upgrade adobe acrobat_reader to a higher version than 9.3,8.0,8.1,8.1.1,8.1.2,8.1.4,8.1.5,8.1.6,8.1.7,9.0,9.1,9.1.1,9.1.2,9.1.3,9.2,and avoid the version (,9.3],8.0,8.1,8.1.1,8.1.2,8.1.4,8.1.5,8.1.6,8.1.7,9.0,9.1,9.1.1,9.1.2,9.1.3,9.2