Air Sdk Project

air-sdk_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Air Sdk

air-sdk

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-10603 1Air Sdk Project 1Air Sdk Nov 21, 2024 Jun 1, 2018 N/A· v4 8.1 HIGH· v3 9.3 HIGH· v2 air-sdk is a NPM wrapper for the Adobe AIR SDK. air-sdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the reques...Show more air-sdk is a NPM wrapper for the Adobe AIR SDK. air-sdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2016-10603

1Air Sdk Project

1Air Sdk

Nov 21, 2024

Jun 1, 2018

N/A· v4

8.1 HIGH· v3

9.3 HIGH· v2

air-sdk is a NPM wrapper for the Adobe AIR SDK. air-sdk downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if the attacker is on the network or positioned in between the user and the remote server.Show less