CVEvulnerability
CVE-2010-3654
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-10-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.
Affected configurations
• adobe flash player (<= 10.1.85.3)
• adobe flash player 6.0.21.0
• adobe flash player 6.0.79
• adobe flash player 7.0
• adobe flash player 7.0.1
• adobe flash player 7.0.25
• adobe flash player 7.0.63
• adobe flash player 7.0.69.0
• adobe flash player 7.0.70.0
• adobe flash player 7.1
• adobe flash player 7.1.1
• adobe flash player 7.2
• adobe flash player 8.0
• adobe flash player 8.0.22.0
• adobe flash player 8.0.24.0
• adobe flash player 8.0.33.0
• adobe flash player 8.0.34.0
• adobe flash player 8.0.35.0
• adobe flash player 8.0.39.0
• adobe flash player 8.0.42.0
• adobe flash player 9.0.16
• adobe flash player 9.0.18d60
• adobe flash player 9.0.20
• adobe flash player 9.0.20.0
• adobe flash player 9.0.28
• adobe flash player 9.0.28.0
• adobe flash player 9.0.31
• adobe flash player 9.0.31.0
• adobe flash player 9.0.45.0
• adobe flash player 9.0.47.0
• adobe flash player 9.0.48.0
• adobe flash player 9.0.112.0
• adobe flash player 9.0.114.0
• adobe flash player 9.0.115.0
• adobe flash player 9.0.124.0
• adobe flash player 9.0.125.0
• adobe flash player 9.0.151.0
• adobe flash player 9.0.152.0
• adobe flash player 9.0.159.0
• adobe flash player 9.0.246.0
• adobe flash player 9.0.260.0
• adobe flash player 9.125.0
• adobe flash player 10.0.0.584
• adobe flash player 10.0.12.10
• adobe flash player 10.0.12.36
• adobe flash player 10.0.15.3
• adobe flash player 10.0.22.87
• adobe flash player 10.0.32.18
• adobe flash player 10.0.42.34
• adobe flash player 10.0.45.2
• adobe flash player 10.1.52.14.1
• adobe flash player 10.1.52.15
• adobe flash player 10.1.53.64
• adobe flash player 10.1.82.76
• macromedia flash player 5.0
• macromedia flash player 5.0 r50
• macromedia flash player 6.0
• macromedia flash player 6.0.29.0
• macromedia flash player 6.0.40.0
• macromedia flash player 6.0.47.0
… and 30 more
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1 blogs.sun.com
- http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html Exploit
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html lists.opensuse.org
- http://secunia.com/advisories/41917 Vendor Advisory
- http://secunia.com/advisories/42030 secunia.com
- http://secunia.com/advisories/42183 secunia.com
- http://secunia.com/advisories/42401 secunia.com
- http://secunia.com/advisories/42926 secunia.com
- http://secunia.com/advisories/43025 secunia.com
- http://secunia.com/advisories/43026 secunia.com
- http://security.gentoo.org/glsa/glsa-201101-08.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-201101-09.xml security.gentoo.org
- http://securityreason.com/securityalert/8210 securityreason.com
- http://support.apple.com/kb/HT4435 support.apple.com
- http://www.adobe.com/support/security/advisories/apsa10-05.html Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb10-26.html www.adobe.com
- http://www.adobe.com/support/security/bulletins/apsb10-28.html www.adobe.com
- http://www.kb.cert.org/vuls/id/298081 US Government Resource
- http://www.redhat.com/support/errata/RHSA-2010-0829.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0834.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0867.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0934.html www.redhat.com
- http://www.securityfocus.com/bid/44504 www.securityfocus.com
- http://www.securitytracker.com/id?1024659 www.securitytracker.com
- http://www.securitytracker.com/id?1024660 www.securitytracker.com
- http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt www.turbolinux.co.jp
- http://www.vupen.com/english/advisories/2010/2903 www.vupen.com
- http://www.vupen.com/english/advisories/2010/2906 www.vupen.com
- http://www.vupen.com/english/advisories/2010/2918 www.vupen.com
- http://www.vupen.com/english/advisories/2010/3111 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0173 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0191 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0192 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0344 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13294 oval.cisecurity.org
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1 blogs.sun.com
- http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html Exploit
- http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html lists.apple.com
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html lists.opensuse.org
- http://secunia.com/advisories/41917 Vendor Advisory
- http://secunia.com/advisories/42030 secunia.com
- http://secunia.com/advisories/42183 secunia.com
- http://secunia.com/advisories/42401 secunia.com
- http://secunia.com/advisories/42926 secunia.com
- http://secunia.com/advisories/43025 secunia.com
- http://secunia.com/advisories/43026 secunia.com
- http://security.gentoo.org/glsa/glsa-201101-08.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-201101-09.xml security.gentoo.org
- http://securityreason.com/securityalert/8210 securityreason.com
- http://support.apple.com/kb/HT4435 support.apple.com
- http://www.adobe.com/support/security/advisories/apsa10-05.html Vendor Advisory
- http://www.adobe.com/support/security/bulletins/apsb10-26.html www.adobe.com
- http://www.adobe.com/support/security/bulletins/apsb10-28.html www.adobe.com
- http://www.kb.cert.org/vuls/id/298081 US Government Resource
- http://www.redhat.com/support/errata/RHSA-2010-0829.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0834.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0867.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2010-0934.html www.redhat.com
- http://www.securityfocus.com/bid/44504 www.securityfocus.com
- http://www.securitytracker.com/id?1024659 www.securitytracker.com
- http://www.securitytracker.com/id?1024660 www.securitytracker.com
- http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt www.turbolinux.co.jp
- http://www.vupen.com/english/advisories/2010/2903 www.vupen.com
- http://www.vupen.com/english/advisories/2010/2906 www.vupen.com
- http://www.vupen.com/english/advisories/2010/2918 www.vupen.com
- http://www.vupen.com/english/advisories/2010/3111 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0173 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0191 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0192 www.vupen.com
- http://www.vupen.com/english/advisories/2011/0344 www.vupen.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13294 oval.cisecurity.org