RETIRED: Adobe Flash Player 10.0.45.2 and AIR 1.5.3.9130 Multiple Remote Vulnerabilities
BID:40759
Info
RETIRED: Adobe Flash Player 10.0.45.2 and AIR 1.5.3.9130 Multiple Remote Vulnerabilities
| Bugtraq ID: | 40759 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 10 2010 12:00AM |
| Updated: | Dec 20 2016 02:05AM |
| Credit: | Will Dormann of CERT, Ralph Loader of Innaworks Development Limited, Anonymous Researcher and Dionysus Blazakis through TippingPoint's Zero Day Initiative, Anonymous Researcher reported through iDefense's Vulnerability Contributor Program, Damian Put throu |
| Vulnerable: |
SuSE Suse Linux Enterprise Desktop 11 SP1 SuSE Suse Linux Enterprise Desktop 11 SuSE Suse Linux Enterprise Desktop 10 SP3 S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 S.u.S.E. openSUSE 11.0 Oracle Solaris 11 Oracle Solaris 10 Adobe Flex 4.0 Adobe Flex 3.0 Adobe Flash Player 10.1.51 .66 Adobe Flash Player 10.0.45 2 Adobe Flash Player 10.0.45 2 Adobe Flash Player 10.0.32 18 Adobe Flash Player 10.0.22 .87 Adobe Flash Player 10.0.15 .3 Adobe Flash Player 10.0.12 .36 Adobe Flash Player 10.0.12 .35 Adobe Flash Player 9.0.262 Adobe Flash Player 9.0.246 0 Adobe Flash Player 9.0.152 .0 Adobe Flash Player 9.0.151 .0 Adobe Flash Player 9.0.124 .0 Adobe Flash Player 9.0.48.0 Adobe Flash Player 9.0.47.0 Adobe Flash Player 9.0.45.0 Adobe Flash Player 9.0.31.0 Adobe Flash Player 9.0.28.0 Adobe Flash Player 9.0.260.0 Adobe Flash Player 9.0.246.0 Adobe Flash Player 9.0.159.0 Adobe Flash Player 9.0.115.0 Adobe Flash Player 9 Adobe Flash Player 8.0.35.0 Adobe Flash Player 8.0.34.0 Adobe Flash Player 8 Adobe Flash Player 7.0.70.0 Adobe Flash Player 7.0.69.0 Adobe Flash Player 7 Adobe Flash Player 10.1 Release Candida Adobe Flash Player 10.0.42.34 Adobe Flash Player 10.0.32.18 Adobe Flash Player 10 Adobe Flash CS5 Professional 0 Adobe Flash CS4 Professional 0 Adobe Flash CS3 Professional 0 Adobe AIR 1.5.3 .9130 Adobe AIR 1.5.3 .9120 Adobe AIR 1.5.3 Adobe AIR 1.5.2 Adobe AIR 1.5.1 Adobe AIR 1.5 Adobe AIR 1.1 Adobe AIR 1.01 Adobe AIR 1.0 |
| Not Vulnerable: |
Adobe Flash Player 10.1.53 .64 Adobe Flash Player 9.0.277.0 Adobe AIR 2.0.2.12610 |
Discussion
RETIRED: Adobe Flash Player 10.0.45.2 and AIR 1.5.3.9130 Multiple Remote Vulnerabilities
Adobe Flash Player and AIR are prone to multiple remote vulnerabilities.
An attacker can exploit these issues to execute arbitrary code, cause denial-of-service conditions, or perform cross-site scripting attacks.
This BID is being retired. The following individual records exist to better document the issues:
40779 Adobe Flash Player and AIR (CVE-2010-2160) Unspecified Memory Corruption Vulnerability
40780 Adobe Flash Player and AIR Image Processing Use After Free Remote Code Execution Vulnerability
40781 Adobe Flash Player (CVE-2010-2161) Memory Index Remote Code Execution Vulnerability
40782 Adobe Flash Player and AIR (CVE-2010-2165) Unspecified Memory Corruption Vulnerability
40783 Adobe Flash Player and AIR (CVE-2010-2166) Unspecified Memory Corruption Vulnerability
40784 Adobe Flash Player and AIR (CVE-2010-2171) Unspecified Memory Corruption Vulnerability
40785 Adobe Flash Player and AIR (CVE-2010-2175) Unspecified Memory Corruption Vulnerability
40786 Adobe Flash Player (CVE-2010-2186) Remote Denial of Service Vulnerability
40787 Adobe Flash Player and AIR (CVE-2010-2176) Unspecified Memory Corruption Vulnerability
40788 Adobe Flash Player and AIR (CVE-2010-2177) Unspecified Memory Corruption Vulnerability
40789 Adobe Flash Player (CVE-2010-2170) Integer Overflow Vulnerability
40790 Adobe Flash Player and AIR (CVE-2010-2178) Unspecified Memory Corruption Vulnerability
40791 Adobe Flash Player and AIR (CVE-2010-2180) Unspecified Memory Corruption Vulnerability
40792 Adobe Flash Player (CVE-2010-2181) Integer Overflow Vulnerability
40793 Adobe Flash Player (CVE-2010-2183) Integer Overflow Vulnerability
40794 Adobe Flash Player and AIR (CVE-2010-2182) Unspecified Memory Corruption Vulnerability
40795 Adobe Flash Player (CVE-2010-2172) Remote Denial of Service Vulnerability
40796 Adobe Flash Player and AIR (CVE-2010-2184) Unspecified Memory Corruption Vulnerability
40797 Adobe Flash Player and AIR (CVE-2010-2187) Unspecified Memory Corruption Vulnerability
40798 Adobe Flash Player and AIR (CVE-2010-2188) Unspecified Memory Corruption Vulnerability
40799 Adobe Flash Player and AIR (CVE-2010-2189) Unspecified Memory Corruption Vulnerability
40800 Adobe Flash Player and AIR (CVE-2010-2173) Invalid Pointer Remote Code Execution Vulnerability
40801 Adobe Flash Player (CVE-2010-2162) Heap Memory Corruption Remote Code Execution Vulnerability
40803 Adobe Flash Player (CVE-2010-2163) Multiple Remote Code Execution Vulnerabilities
40802 Adobe Flash Player (CVE-2010-2167) Multiple Heap Buffer Overflow Vulnerabilities
40805 Adobe Flash Player and AIR (CVE-2010-2174) Invalid Pointer Remote Code Execution Vulnerability
40806 Adobe Flash Player and AIR (CVE-2010-2185) Buffer Overflow Vulnerability
40807 Adobe Flash Player and AIR (CVE-2010-2169) Invalid Pointer Remote Memory Corruption Vulnerability
40808 Adobe Flash Player and AIR URI Parsing Cross Site Scripting Vulnerability
40809 Adobe Flash Player (CVE-2009-3793) Remote Code Execution Vulnerability
Adobe Flash Player and AIR are prone to multiple remote vulnerabilities.
An attacker can exploit these issues to execute arbitrary code, cause denial-of-service conditions, or perform cross-site scripting attacks.
This BID is being retired. The following individual records exist to better document the issues:
40779 Adobe Flash Player and AIR (CVE-2010-2160) Unspecified Memory Corruption Vulnerability
40780 Adobe Flash Player and AIR Image Processing Use After Free Remote Code Execution Vulnerability
40781 Adobe Flash Player (CVE-2010-2161) Memory Index Remote Code Execution Vulnerability
40782 Adobe Flash Player and AIR (CVE-2010-2165) Unspecified Memory Corruption Vulnerability
40783 Adobe Flash Player and AIR (CVE-2010-2166) Unspecified Memory Corruption Vulnerability
40784 Adobe Flash Player and AIR (CVE-2010-2171) Unspecified Memory Corruption Vulnerability
40785 Adobe Flash Player and AIR (CVE-2010-2175) Unspecified Memory Corruption Vulnerability
40786 Adobe Flash Player (CVE-2010-2186) Remote Denial of Service Vulnerability
40787 Adobe Flash Player and AIR (CVE-2010-2176) Unspecified Memory Corruption Vulnerability
40788 Adobe Flash Player and AIR (CVE-2010-2177) Unspecified Memory Corruption Vulnerability
40789 Adobe Flash Player (CVE-2010-2170) Integer Overflow Vulnerability
40790 Adobe Flash Player and AIR (CVE-2010-2178) Unspecified Memory Corruption Vulnerability
40791 Adobe Flash Player and AIR (CVE-2010-2180) Unspecified Memory Corruption Vulnerability
40792 Adobe Flash Player (CVE-2010-2181) Integer Overflow Vulnerability
40793 Adobe Flash Player (CVE-2010-2183) Integer Overflow Vulnerability
40794 Adobe Flash Player and AIR (CVE-2010-2182) Unspecified Memory Corruption Vulnerability
40795 Adobe Flash Player (CVE-2010-2172) Remote Denial of Service Vulnerability
40796 Adobe Flash Player and AIR (CVE-2010-2184) Unspecified Memory Corruption Vulnerability
40797 Adobe Flash Player and AIR (CVE-2010-2187) Unspecified Memory Corruption Vulnerability
40798 Adobe Flash Player and AIR (CVE-2010-2188) Unspecified Memory Corruption Vulnerability
40799 Adobe Flash Player and AIR (CVE-2010-2189) Unspecified Memory Corruption Vulnerability
40800 Adobe Flash Player and AIR (CVE-2010-2173) Invalid Pointer Remote Code Execution Vulnerability
40801 Adobe Flash Player (CVE-2010-2162) Heap Memory Corruption Remote Code Execution Vulnerability
40803 Adobe Flash Player (CVE-2010-2163) Multiple Remote Code Execution Vulnerabilities
40802 Adobe Flash Player (CVE-2010-2167) Multiple Heap Buffer Overflow Vulnerabilities
40805 Adobe Flash Player and AIR (CVE-2010-2174) Invalid Pointer Remote Code Execution Vulnerability
40806 Adobe Flash Player and AIR (CVE-2010-2185) Buffer Overflow Vulnerability
40807 Adobe Flash Player and AIR (CVE-2010-2169) Invalid Pointer Remote Memory Corruption Vulnerability
40808 Adobe Flash Player and AIR URI Parsing Cross Site Scripting Vulnerability
40809 Adobe Flash Player (CVE-2009-3793) Remote Code Execution Vulnerability
Exploit / POC
RETIRED: Adobe Flash Player 10.0.45.2 and AIR 1.5.3.9130 Multiple Remote Vulnerabilities
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and will not require specific exploit code.
Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may be trivial to exploit and will not require specific exploit code.
Solution / Fix
RETIRED: Adobe Flash Player 10.0.45.2 and AIR 1.5.3.9130 Multiple Remote Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
S.u.S.E. openSUSE 11.1
S.u.S.E. openSUSE 11.0
S.u.S.E. openSUSE 11.2
Solution:
Updates are available. Please see the references for more information.
S.u.S.E. openSUSE 11.1
-
SuSE flash-player-10.1.53.64-1.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/flash-player-10.1.53 .64-1.1.1.i586.rpm
S.u.S.E. openSUSE 11.0
-
SuSE flash-player-10.1.53.64-1.1.i586.rpm
http://download.opensuse.org/update/11.0/rpm/i586/flash-player-10.1.53 .64-1.1.i586.rpm
S.u.S.E. openSUSE 11.2
-
SuSE flash-player-10.1.53.64-1.1.1.i586.rpm
http://download.opensuse.org/update/11.2/rpm/i586/flash-player-10.1.53 .64-1.1.1.i586.rpm
References
RETIRED: Adobe Flash Player 10.0.45.2 and AIR 1.5.3.9130 Multiple Remote Vulnerabilities
References:
References:
- Adobe Flash Homepage (Adobe)
- Adobe Flash Player Out of Bounds Memory Indexing Vulnerability (iDefense Labs)
- Adobe Flash Player Use-After-Free Vulnerability (iDefense Labs)
- APSB10-14 Security update available for Adobe Flash Player (Adobe)
- Multiple Vulnerabilities in Adobe Flash Player (Oracle)