RCE in Adobe Adobe_air
CVE-2010-2216
Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than C…
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.013 (79.8th percentile) — read the EPSS interpretation.
Affected products
- Adobe Adobe_air — versions 1.0, 1.0.1, 1.5.1
- Adobe Flash_player — versions 7.2, 7.0.63, 7.0.1
- Adobe Flash_player_for_linux — versions 10.0.12.36, 9.0.115.0, 9.0.124.0
- N/a — versions n/a
Weakness classification (CWE)
References
- ADV-2011-0192 (vdb-entry, x_refsource_VUPEN)
- psirt@adobe.com (x_refsource_CONFIRM)
- HPSBMA02592 (x_refsource_HP, vendor-advisory)
- oval:org.mitre.oval:def:16177 (x_refsource_OVAL, signature, vdb-entry)
- 1024621 (vdb-entry, x_refsource_SECTRACK)
- 43026 (x_refsource_SECUNIA, third-party-advisory)
- GLSA-201101-09 (vendor-advisory, x_refsource_GENTOO)
- 42362 (vdb-entry, x_refsource_BID)
- APPLE-SA-2010-11-10-1 (vendor-advisory, x_refsource_APPLE)
- oval:org.mitre.oval:def:11977 (x_refsource_OVAL, signature, vdb-entry)