CVE-2010-2164 Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vector...
HighCVSS 9.3
EPSS 7.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unspecified "image type within a certain function."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | = 9.0.16 | No fix listed |
| Adobe flash player | = 9.0.20 | No fix listed |
| Adobe flash player | = 9.0.20.0 | No fix listed |
| Adobe flash player | = 9.0.28 | No fix listed |
| Adobe flash player | = 9.0.28.0 | No fix listed |
| Adobe flash player | = 9.0.31 | No fix listed |
| Adobe flash player | = 9.0.31.0 | No fix listed |
| Adobe flash player | = 9.0.45.0 | No fix listed |
| Adobe flash player | = 9.0.47.0 | No fix listed |
| Adobe flash player | = 9.0.48.0 | No fix listed |
| Adobe flash player | = 9.0.115.0 | No fix listed |
| Adobe flash player | = 9.0.124.0 | No fix listed |
| Adobe flash player | = 9.0.125.0 | No fix listed |
| Adobe flash player | = 9.0.151.0 | No fix listed |
| Adobe flash player | = 9.0.152.0 | No fix listed |
| Adobe flash player | = 9.0.159.0 | No fix listed |
| Adobe flash player | = 9.0.246.0 | No fix listed |
| Adobe flash player | = 9.0.260.0 | No fix listed |
| Adobe flash player | = 9.0.262.0 | No fix listed |
| Adobe flash player | <= 10.0.45.2 | No fix listed |
| Adobe flash player | = 10.0.0.584 | No fix listed |
| Adobe flash player | = 10.0.12.10 | No fix listed |
| Adobe flash player | = 10.0.12.36 | No fix listed |
| Adobe flash player | = 10.0.15.3 | No fix listed |
| Adobe flash player | = 10.0.22.87 | No fix listed |
Show 42 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | = 10.0.32.18 | No fix listed |
| Adobe flash player | = 10.0.42.34 | No fix listed |
| Adobe flash player | = 6.0.79 | No fix listed |
| Adobe flash player | = 7.0 | No fix listed |
| Adobe flash player | = 7.0.1 | No fix listed |
| Adobe flash player | = 7.0.14.0 | No fix listed |
| Adobe flash player | = 7.0.19.0 | No fix listed |
| Adobe flash player | = 7.0.24.0 | No fix listed |
| Adobe flash player | = 7.0.25 | No fix listed |
| Adobe flash player | = 7.0.53.0 | No fix listed |
| Adobe flash player | = 7.0.60.0 | No fix listed |
| Adobe flash player | = 7.0.61.0 | No fix listed |
| Adobe flash player | = 7.0.63 | No fix listed |
| Adobe flash player | = 7.0.66.0 | No fix listed |
| Adobe flash player | = 7.0.67.0 | No fix listed |
| Adobe flash player | = 7.0.68.0 | No fix listed |
| Adobe flash player | = 7.0.69.0 | No fix listed |
| Adobe flash player | = 7.0.70.0 | No fix listed |
| Adobe flash player | = 7.0.73.0 | No fix listed |
| Adobe flash player | = 7.1 | No fix listed |
| Adobe flash player | = 7.1.1 | No fix listed |
| Adobe flash player | = 7.2 | No fix listed |
| Adobe flash player | = 8.0 | No fix listed |
| Adobe flash player | = 8.0.22.0 | No fix listed |
| Adobe flash player | = 8.0.24.0 | No fix listed |
| Adobe flash player | = 8.0.33.0 | No fix listed |
| Adobe flash player | = 8.0.34.0 | No fix listed |
| Adobe flash player | = 8.0.35.0 | No fix listed |
| Adobe flash player | = 8.0.39.0 | No fix listed |
| Adobe flash player | = 8.0.42.0 | No fix listed |
| macromedia flash player | = 5.0 | No fix listed |
| macromedia flash player | = 5.0.30.0 | No fix listed |
| macromedia flash player | = 5.0.41.0 | No fix listed |
| macromedia flash player | = 5.0.42.0 | No fix listed |
| macromedia flash player | = 5.0.58.0 | No fix listed |
| Adobe air | <= 1.5.3.9130 | No fix listed |
| Adobe air | = 1.0 | No fix listed |
| Adobe air | = 1.1 | No fix listed |
| Adobe air | = 1.5 | No fix listed |
| Adobe air | = 1.5.1 | No fix listed |
| Adobe air | = 1.5.2 | No fix listed |
| Adobe air | = 1.5.3 | No fix listed |
References
- SSRT100179 vendor-advisory
- 20100610 Adobe Flash Player Use-After-Free Vulnerability third-party-advisory
- APPLE-SA-2010-11-10-1 vendor-advisory
- SUSE-SA:2010:024 vendor-advisory
- SUSE-SR:2010:013 vendor-advisory
- 40144 third-party-advisory vendor-advisory
- 40545 third-party-advisory vendor-advisory
- 43026 third-party-advisory vendor-advisory
- GLSA-201101-09 vendor-advisory
- 1024085 vdb-entry
- 1024086 vdb-entry
- support.apple.com
- www.adobe.com patch vendor-advisory
- RHSA-2010:0464 vendor-advisory
- RHSA-2010:0470 vendor-advisory
- 40759 vdb-entry
- 40780 vdb-entry
- TLSA-2010-19 vendor-advisory
- TA10-162A third-party-advisory us-government-resource
- ADV-2010-1421 vdb-entry vendor-advisory
- ADV-2010-1432 vdb-entry vendor-advisory
- ADV-2010-1434 vdb-entry vendor-advisory
- ADV-2010-1453 vdb-entry vendor-advisory
- ADV-2010-1482 vdb-entry vendor-advisory
- ADV-2010-1522 vdb-entry vendor-advisory
- ADV-2010-1793 vdb-entry vendor-advisory
- ADV-2011-0192 vdb-entry vendor-advisory
- oval:org.mitre.oval:def:15798 signature vdb-entry
- oval:org.mitre.oval:def:6765 signature vdb-entry