PT-2010-2162 · Adobe · Flash Player

Published 2010-01-21 · Updated 2024-02-03 · CVE-2010-0378

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player version 6.0.79

Description The issue allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption. This is related to a use-after-free vulnerability.

Recommendations For Adobe Flash Player version 6.0.79, update to a newer version to mitigate the risk.

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2010-0378

Affected Products

Flash Player

References · 9

• http://microsoft.com/technet/security/advisory/979267.mspx · Vendor Advisory
• http://secunia.com/secunia_research/2007-77 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0378 · Security Note
• http://secunia.com/advisories/27105 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0378 · Note
• https://t.me/cvenotify/69897 · Telegram Post
• http://securitytracker.com/id?1023435 · Note
• http://kb.cert.org/vuls/id/204889 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7580 · Note