CVE-2010-2174 Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointe...
HighCVSS 9.3
EPSS 7.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newfunction (0x44) operator, a different vulnerability than CVE-2010-2173.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | = 9.0.16 | No fix listed |
| Adobe flash player | = 9.0.20 | No fix listed |
| Adobe flash player | = 9.0.20.0 | No fix listed |
| Adobe flash player | = 9.0.28 | No fix listed |
| Adobe flash player | = 9.0.28.0 | No fix listed |
| Adobe flash player | = 9.0.31 | No fix listed |
| Adobe flash player | = 9.0.31.0 | No fix listed |
| Adobe flash player | = 9.0.45.0 | No fix listed |
| Adobe flash player | = 9.0.47.0 | No fix listed |
| Adobe flash player | = 9.0.48.0 | No fix listed |
| Adobe flash player | = 9.0.115.0 | No fix listed |
| Adobe flash player | = 9.0.124.0 | No fix listed |
| Adobe flash player | = 9.0.125.0 | No fix listed |
| Adobe flash player | = 9.0.151.0 | No fix listed |
| Adobe flash player | = 9.0.152.0 | No fix listed |
| Adobe flash player | = 9.0.159.0 | No fix listed |
| Adobe flash player | = 9.0.246.0 | No fix listed |
| Adobe flash player | = 9.0.260.0 | No fix listed |
| Adobe flash player | = 9.0.262.0 | No fix listed |
| Adobe flash player | <= 10.0.45.2 | No fix listed |
| Adobe flash player | = 10.0.0.584 | No fix listed |
| Adobe flash player | = 10.0.12.10 | No fix listed |
| Adobe flash player | = 10.0.12.36 | No fix listed |
| Adobe flash player | = 10.0.15.3 | No fix listed |
| Adobe flash player | = 10.0.22.87 | No fix listed |
Show 42 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | = 10.0.32.18 | No fix listed |
| Adobe flash player | = 10.0.42.34 | No fix listed |
| Adobe flash player | = 6.0.79 | No fix listed |
| Adobe flash player | = 7.0 | No fix listed |
| Adobe flash player | = 7.0.1 | No fix listed |
| Adobe flash player | = 7.0.14.0 | No fix listed |
| Adobe flash player | = 7.0.19.0 | No fix listed |
| Adobe flash player | = 7.0.24.0 | No fix listed |
| Adobe flash player | = 7.0.25 | No fix listed |
| Adobe flash player | = 7.0.53.0 | No fix listed |
| Adobe flash player | = 7.0.60.0 | No fix listed |
| Adobe flash player | = 7.0.61.0 | No fix listed |
| Adobe flash player | = 7.0.63 | No fix listed |
| Adobe flash player | = 7.0.66.0 | No fix listed |
| Adobe flash player | = 7.0.67.0 | No fix listed |
| Adobe flash player | = 7.0.68.0 | No fix listed |
| Adobe flash player | = 7.0.69.0 | No fix listed |
| Adobe flash player | = 7.0.70.0 | No fix listed |
| Adobe flash player | = 7.0.73.0 | No fix listed |
| Adobe flash player | = 7.1 | No fix listed |
| Adobe flash player | = 7.1.1 | No fix listed |
| Adobe flash player | = 7.2 | No fix listed |
| Adobe flash player | = 8.0 | No fix listed |
| Adobe flash player | = 8.0.22.0 | No fix listed |
| Adobe flash player | = 8.0.24.0 | No fix listed |
| Adobe flash player | = 8.0.33.0 | No fix listed |
| Adobe flash player | = 8.0.34.0 | No fix listed |
| Adobe flash player | = 8.0.35.0 | No fix listed |
| Adobe flash player | = 8.0.39.0 | No fix listed |
| Adobe flash player | = 8.0.42.0 | No fix listed |
| macromedia flash player | = 5.0 | No fix listed |
| macromedia flash player | = 5.0.30.0 | No fix listed |
| macromedia flash player | = 5.0.41.0 | No fix listed |
| macromedia flash player | = 5.0.42.0 | No fix listed |
| macromedia flash player | = 5.0.58.0 | No fix listed |
| Adobe air | <= 1.5.3.9130 | No fix listed |
| Adobe air | = 1.0 | No fix listed |
| Adobe air | = 1.1 | No fix listed |
| Adobe air | = 1.5 | No fix listed |
| Adobe air | = 1.5.1 | No fix listed |
| Adobe air | = 1.5.2 | No fix listed |
| Adobe air | = 1.5.3 | No fix listed |
References
- SSRT100179 vendor-advisory
- APPLE-SA-2010-11-10-1 vendor-advisory
- SUSE-SA:2010:024 vendor-advisory
- SUSE-SR:2010:013 vendor-advisory
- 40144 third-party-advisory
- 40545 third-party-advisory
- 43026 third-party-advisory
- GLSA-201101-09 vendor-advisory
- 1024085 vdb-entry
- 1024086 vdb-entry
- support.apple.com
- www.adobe.com patch vendor-advisory
- RHSA-2010:0464 vendor-advisory
- RHSA-2010:0470 vendor-advisory
- 20100616 VUPEN Security Research - Adobe Flash Player "newfunction" Invalid Pointer Vulnerability (CVE-2010-2174) mailing-list
- 40759 vdb-entry
- 40805 vdb-entry
- TLSA-2010-19 vendor-advisory
- TA10-162A third-party-advisory us-government-resource
- ADV-2010-1421 vdb-entry
- ADV-2010-1432 vdb-entry
- ADV-2010-1434 vdb-entry
- ADV-2010-1453 vdb-entry
- ADV-2010-1482 vdb-entry
- ADV-2010-1522 vdb-entry
- ADV-2010-1793 vdb-entry
- ADV-2011-0192 vdb-entry
- adobe-fpair-invalidpointer-ce(59323) vdb-entry
- oval:org.mitre.oval:def:15360 signature vdb-entry
- oval:org.mitre.oval:def:7528 signature vdb-entry