CVE-2010-1297

published 2010-06-08

CVE-2010-1297: Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

KEV ITW EXPLOIT

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
adobe	acrobat	>= 8.0 < 8.2.3	8.2.3
adobe	acrobat	>= 9.0 < 9.3.3	9.3.3
adobe	air	< 2.0.2.12610	2.0.2.12610
adobe	flash_player	< 9.0.277.0	9.0.277.0
adobe	flash_player	>= 10.0 < 10.1.53.64	10.1.53.64
opensuse	opensuse	11.0 – 11.2	—
suse	linux_enterprise	—	—
suse	linux_enterprise	—	—

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vulncheck 7.8 HIGH

cisa 7.8 HIGH

CWE-787