CVE-2010-1297
High · 7.8 CISA KEVCVSS
7.8
EPSS
82.5%
Published
Jun 8, 2010
CISA due date
Jun 22, 2022
The record
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:rhel_extras:3 | flash-plugin | 0 | 0:9.0.277.0-1.el3.with.oss |
| Red Hat:rhel_extras:4 | acroread | 0 | 0:9.3.3-2.el4 |
| Red Hat:rhel_extras:4 | acroread-plugin | 0 | 0:9.3.3-2.el4 |
| Red Hat:rhel_extras:4 | flash-plugin | 0 | 0:9.0.277.0-1.el4 |
| Red Hat:rhel_extras:5::client | acroread | 0 | 0:9.3.3-1.el5 |
| Red Hat:rhel_extras:5::client | acroread-plugin | 0 | 0:9.3.3-1.el5 |
| Red Hat:rhel_extras:5::client | flash-plugin | 0 | 0:10.1-2.el5 |
| Red Hat:rhel_extras:5::server | acroread | 0 | 0:9.3.3-1.el5 |
| Red Hat:rhel_extras:5::server | acroread-plugin | 0 | 0:9.3.3-1.el5 |
| Red Hat:rhel_extras:5::server | flash-plugin | 0 | 0:10.1-2.el5 |
Related vulnerabilities
- CVE-2010-2884 Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and… Also affects flash-plugin
- CVE-2009-3794 Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before… Also affects flash-plugin
- CVE-2009-1869 Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe… Also affects flash-plugin
- CVE-2009-1868 Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before… Also affects flash-plugin
- CVE-2009-1862 Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash… Also affects flash-plugin
- CVE-2009-0519 Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before… Also affects flash-plugin
- CVE-2009-0520 Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly… Also affects flash-plugin
- CVE-2008-5499 Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and… Also affects flash-plugin