CVE ID:	CVE-2010-3636
Description:	Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3636 http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html BugTraq ID: 44691 http://www.securityfocus.com/bid/44691 http://security.gentoo.org/glsa/glsa-201101-09.xml HPdes Security Advisory: HPSBMA02663 http://marc.info/?l=bugtraq&m=130331642631603&w=2 HPdes Security Advisory: SSRT100428 http://marc.info/?l=bugtraq&m=130331642631603&w=2 http://jvn.jp/en/jp/JVN48425028/index.html http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000054.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12142 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15913 RedHat Security Advisories: RHSA-2010:0829 http://www.redhat.com/support/errata/RHSA-2010-0829.html RedHat Security Advisories: RHSA-2010:0834 http://www.redhat.com/support/errata/RHSA-2010-0834.html RedHat Security Advisories: RHSA-2010:0867 http://www.redhat.com/support/errata/RHSA-2010-0867.html http://secunia.com/advisories/42183 http://secunia.com/advisories/42926 http://secunia.com/advisories/43026 SuSE Security Announcement: SUSE-SA:2010:055 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html http://www.vupen.com/english/advisories/2010/2903 http://www.vupen.com/english/advisories/2010/2906 http://www.vupen.com/english/advisories/2010/2918 http://www.vupen.com/english/advisories/2011/0173 http://www.vupen.com/english/advisories/2011/0192