CVE-2010-0187 Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.
MediumCVSS 4.3
EPSS 15.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adobe air | <= 1.5.3.9120 | No fix listed |
| adobe air | = 1.0 | No fix listed |
| adobe air | = 1.1 | No fix listed |
| adobe air | = 1.5.1 | No fix listed |
| adobe air | = 1.5.2 | No fix listed |
| adobe air | = 1.5.3 | No fix listed |
| Adobe flash player | <= 10.0.42.34 | No fix listed |
| Adobe flash player | = 6.0.21.0 | No fix listed |
| Adobe flash player | = 6.0.79 | No fix listed |
| Adobe flash player | = 7.0 | No fix listed |
| Adobe flash player | = 7.0.1 | No fix listed |
| Adobe flash player | = 7.0.25 | No fix listed |
| Adobe flash player | = 7.0.63 | No fix listed |
| Adobe flash player | = 7.0.69.0 | No fix listed |
| Adobe flash player | = 7.0.70.0 | No fix listed |
| Adobe flash player | = 7.1 | No fix listed |
| Adobe flash player | = 7.1.1 | No fix listed |
| Adobe flash player | = 7.2 | No fix listed |
| Adobe flash player | = 8.0 | No fix listed |
| Adobe flash player | = 8.0.22.0 | No fix listed |
| Adobe flash player | = 8.0.24.0 | No fix listed |
| Adobe flash player | = 8.0.33.0 | No fix listed |
| Adobe flash player | = 8.0.34.0 | No fix listed |
| Adobe flash player | = 8.0.35.0 | No fix listed |
| Adobe flash player | = 8.0.39.0 | No fix listed |
Show 28 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | = 8.0.42.0 | No fix listed |
| Adobe flash player | = 9.0 | No fix listed |
| Adobe flash player | = 9.0.16 | No fix listed |
| Adobe flash player | = 9.0.18d60 | No fix listed |
| Adobe flash player | = 9.0.20 | No fix listed |
| Adobe flash player | = 9.0.20.0 | No fix listed |
| Adobe flash player | = 9.0.28.0 | No fix listed |
| Adobe flash player | = 9.0.31 | No fix listed |
| Adobe flash player | = 9.0.31.0 | No fix listed |
| Adobe flash player | = 9.0.45.0 | No fix listed |
| Adobe flash player | = 9.0.47.0 | No fix listed |
| Adobe flash player | = 9.0.48.0 | No fix listed |
| Adobe flash player | = 9.0.112.0 | No fix listed |
| Adobe flash player | = 9.0.114.0 | No fix listed |
| Adobe flash player | = 9.0.115.0 | No fix listed |
| Adobe flash player | = 9.0.124.0 | No fix listed |
| Adobe flash player | = 9.0.125.0 | No fix listed |
| Adobe flash player | = 9.0.151.0 | No fix listed |
| Adobe flash player | = 9.0.152.0 | No fix listed |
| Adobe flash player | = 9.0.159.0 | No fix listed |
| Adobe flash player | = 9.0.246.0 | No fix listed |
| Adobe flash player | = 9.0.260.0 | No fix listed |
| Adobe flash player | = 9.125.0 | No fix listed |
| Adobe flash player | = 10.0.12.10 | No fix listed |
| Adobe flash player | = 10.0.12.36 | No fix listed |
| Adobe flash player | = 10.0.15.3 | No fix listed |
| Adobe flash player | = 10.0.22.87 | No fix listed |
| Adobe flash player | = 10.0.32.18 | No fix listed |
References
- APPLE-SA-2010-06-15-1 vendor-advisory
- SUSE-SR:2010:006 vendor-advisory
- sebug.net
- 38547 third-party-advisory
- 38915 third-party-advisory
- 40220 third-party-advisory
- 43026 third-party-advisory
- GLSA-201101-09 vendor-advisory
- 1023585 vdb-entry
- support.apple.com
- www.adobe.com vendor-advisory
- 11182 exploit
- 38200 vdb-entry
- ADV-2010-1481 vdb-entry
- ADV-2011-0192 vdb-entry
- bugzilla.redhat.com
- oval:org.mitre.oval:def:16125 signature vdb-entry
- oval:org.mitre.oval:def:8393 signature vdb-entry
- RHSA-2010:0102 vendor-advisory