CVEvulnerability
CVE-2010-2167
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-06-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed (1) GIF or (2) JPEG data.
Affected configurations
• adobe flash player 9.0.16
• adobe flash player 9.0.20
• adobe flash player 9.0.20.0
• adobe flash player 9.0.28
• adobe flash player 9.0.28.0
• adobe flash player 9.0.31
• adobe flash player 9.0.31.0
• adobe flash player 9.0.45.0
• adobe flash player 9.0.47.0
• adobe flash player 9.0.48.0
• adobe flash player 9.0.115.0
• adobe flash player 9.0.124.0
• adobe flash player 9.0.125.0
• adobe flash player 9.0.151.0
• adobe flash player 9.0.152.0
• adobe flash player 9.0.159.0
• adobe flash player 9.0.246.0
• adobe flash player 9.0.260.0
• adobe flash player 9.0.262.0
• adobe flash player (<= 10.0.45.2)
• adobe flash player 10.0.0.584
• adobe flash player 10.0.12.10
• adobe flash player 10.0.12.36
• adobe flash player 10.0.15.3
• adobe flash player 10.0.22.87
• adobe flash player 10.0.32.18
• adobe flash player 10.0.42.34
• adobe flash player 6.0.79
• adobe flash player 7.0
• adobe flash player 7.0.1
• adobe flash player 7.0.14.0
• adobe flash player 7.0.19.0
• adobe flash player 7.0.24.0
• adobe flash player 7.0.25
• adobe flash player 7.0.53.0
• adobe flash player 7.0.60.0
• adobe flash player 7.0.61.0
• adobe flash player 7.0.63
• adobe flash player 7.0.66.0
• adobe flash player 7.0.67.0
• adobe flash player 7.0.68.0
• adobe flash player 7.0.69.0
• adobe flash player 7.0.70.0
• adobe flash player 7.0.73.0
• adobe flash player 7.1
• adobe flash player 7.1.1
• adobe flash player 7.2
• adobe flash player 8.0
• adobe flash player 8.0.22.0
• adobe flash player 8.0.24.0
• adobe flash player 8.0.33.0
• adobe flash player 8.0.34.0
• adobe flash player 8.0.35.0
• adobe flash player 8.0.39.0
• adobe flash player 8.0.42.0
• macromedia flash player 5.0
• macromedia flash player 5.0.30.0
• macromedia flash player 5.0.41.0
• macromedia flash player 5.0.42.0
• macromedia flash player 5.0.58.0
… and 7 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 itrc.hp.com
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html lists.opensuse.org
- http://secunia.com/advisories/40144 secunia.com
- http://secunia.com/advisories/40545 secunia.com
- http://secunia.com/advisories/43026 secunia.com
- http://security.gentoo.org/glsa/glsa-201101-09.xml security.gentoo.org
- http://securitytracker.com/id?1024085 securitytracker.com
- http://securitytracker.com/id?1024086 securitytracker.com
- http://support.apple.com/kb/HT4435 support.apple.com
- http://www.adobe.com/support/security/bulletins/apsb10-14.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0464.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0470.html www.redhat.com
- http://www.securityfocus.com/archive/1/511847/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/40759 www.securityfocus.com
- http://www.securityfocus.com/bid/40802 www.securityfocus.com
- http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt www.turbolinux.co.jp
- http://www.us-cert.gov/cas/techalerts/TA10-162A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/1421 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1432 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1434 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1453 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1482 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1522 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1793 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0192 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15437 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7491 oval.cisecurity.org
- http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 itrc.hp.com
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html lists.opensuse.org
- http://secunia.com/advisories/40144 secunia.com
- http://secunia.com/advisories/40545 secunia.com
- http://secunia.com/advisories/43026 secunia.com
- http://security.gentoo.org/glsa/glsa-201101-09.xml security.gentoo.org
- http://securitytracker.com/id?1024085 securitytracker.com
- http://securitytracker.com/id?1024086 securitytracker.com
- http://support.apple.com/kb/HT4435 support.apple.com
- http://www.adobe.com/support/security/bulletins/apsb10-14.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2010-0464.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0470.html www.redhat.com
- http://www.securityfocus.com/archive/1/511847/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/40759 www.securityfocus.com
- http://www.securityfocus.com/bid/40802 www.securityfocus.com
- http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt www.turbolinux.co.jp
- http://www.us-cert.gov/cas/techalerts/TA10-162A.html US Government Resource
- http://www.vupen.com/english/advisories/2010/1421 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1432 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1434 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1453 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1482 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1522 www.vupen.com
- http://www.vupen.com/english/advisories/2010/1793 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0192 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15437 oval.cisecurity.org
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7491 oval.cisecurity.org