CVE-2010-3976 — Adobe Flash Player vulnerability

4 documents4 sources
Severity
9.3CRITICALNVD
EPSS
7.7%
top 8.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Flash Player
Timeline
PublishedOct 19
Latest updateMay 14

Description

Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDadobe/flash_player9.0.277.0+40

🔴Vulnerability Details

1
GHSA
GHSA-84w5-gxxj-77r2: Untrusted search path vulnerability in Adobe Flash Player before 9↗2022-05-14
▶

💥Exploits & PoCs

1
Exploit-DB
ProFTP 2.9 - Banner Remote Buffer Overflow (Metasploit)↗2010-07-03
▶

💬Community

1
Bugzilla
flash-plugin: security bulletin APSB10-26↗2010-11-04
▶