PT-2010-5207 · Adobe · Flash Player

Published 2010-10-19 · Updated 2018-10-30 · CVE-2010-3975

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player version 9

Description The issue allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks. This can be achieved via a Trojan horse schannel.dll that is located in the same folder as a file that is processed by Flash.

Recommendations For Adobe Flash Player version 9, update to a version that is not affected by this issue to prevent exploitation.

Exploit

Fix

Related Identifiers

CVE-2010-3975

Affected Products

Flash Player

References · 4

• 🔥 http://securityfocus.com/archive/1/513397 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3975 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3975 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12212 · Note