Adobe Acrobat, Reader, and Flash CVE-2010-3654 Remote Code Execution Vulnerability
BID:44504
Info
Adobe Acrobat, Reader, and Flash CVE-2010-3654 Remote Code Execution Vulnerability
| Bugtraq ID: | 44504 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2010-3654 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 28 2010 12:00AM |
| Updated: | Mar 19 2015 08:46AM |
| Credit: | Adobe |
| Vulnerable: |
SuSE SUSE Linux Enterprise Desktop 11 SP1 SuSE SUSE Linux Enterprise Desktop 11 SuSE SUSE Linux Enterprise Desktop 10 SP3 SuSE openSUSE 11.3 Sun Solaris 11 Express Sun Solaris 11 Sun Solaris 10_x86 Sun Solaris 10_sparc S.u.S.E. openSUSE 11.2 S.u.S.E. openSUSE 11.1 RedHat Enterprise Linux WS Extras 4 RedHat Enterprise Linux Extras 4 RedHat Enterprise Linux ES Extras 4 RedHat Enterprise Linux AS Extras 4 RedHat Desktop Extras 4 Red Hat Enterprise Linux Workstation Supplementary 6 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Server Supplementary 6 Red Hat Enterprise Linux Desktop Supplementary 6 Red Hat Enterprise Linux Desktop Supplementary 5 client Macromedia Flash 6.0.79 .0 Macromedia Flash 6.0.65 .0 Macromedia Flash 6.0.47 .0 Macromedia Flash 6.0.40 .0 Macromedia Flash 6.0.29 .0 Macromedia Flash 6.0 Macromedia Flash 5.0 r50 Macromedia Flash 5.0 Google Chrome 5.0.375 99 Google Chrome 5.0.375 86 Google Chrome 5.0.375 127 Google Chrome 5.0.375 125 Google Chrome 5.0.375 .70 Google Chrome 5.0.375 .55 Google Chrome 7.0.517.41 Google Chrome 6.0.472.42 Google Chrome 6.0.472.41 Google Chrome 6.0.472.40 Google Chrome 6.0.472.4 Google Chrome 6.0.472.39 Google Chrome 6.0.472.38 Google Chrome 6.0.472.37 Google Chrome 6.0.472.36 Google Chrome 6.0.472.35 Google Chrome 6.0.472.34 Google Chrome 6.0.472.33 Google Chrome 6.0.472.32 Google Chrome 6.0.472.31 Google Chrome 6.0.472.30 Google Chrome 6.0.472.3 Google Chrome 6.0.472.29 Google Chrome 6.0.472.28 Google Chrome 6.0.472.27 Google Chrome 6.0.472.26 Google Chrome 6.0.472.25 Google Chrome 6.0.472.24 Google Chrome 6.0.472.23 Google Chrome 6.0.472.22 Google Chrome 6.0.472.21 Google Chrome 6.0.472.20 Google Chrome 6.0.472.2 Google Chrome 6.0.472.19 Google Chrome 6.0.472.18 Google Chrome 6.0.472.17 Google Chrome 6.0.472.16 Google Chrome 6.0.472.15 Google Chrome 6.0.472.14 Google Chrome 6.0.472.13 Google Chrome 6.0.472.12 Google Chrome 6.0.472.11 Google Chrome 6.0.472.10 Google Chrome 6.0.472.1 Google Chrome 6.0.472.0 Google Chrome 6.0.471.0 Google Chrome 6.0.470.0 Google Chrome 6.0.469.0 Google Chrome 6.0.467.0 Google Chrome 6.0.466.6 Google Chrome 6.0.466.5 Google Chrome 6.0.466.4 Google Chrome 6.0.466.3 Google Chrome 6.0.466.2 Google Chrome 6.0.466.1 Google Chrome 6.0.466.0 Google Chrome 6.0.465.2 Google Chrome 6.0.465.1 Google Chrome 6.0.464.1 Google Chrome 6.0.462.0 Google Chrome 6.0.461.0 Google Chrome 6.0.460.0 Google Chrome 6.0.459.0 Google Chrome 6.0.458.2 Google Chrome 6.0.458.1 Google Chrome 6.0.458.0 Google Chrome 6.0.457.0 Google Chrome 6.0.456.0 Google Chrome 6.0.455.0 Google Chrome 6.0.454.0 Google Chrome 6.0.453.1 Google Chrome 6.0.453.0 Google Chrome 6.0.452.1 Google Chrome 6.0.452.0 Google Chrome 6.0.451.0 Google Chrome 6.0.450.4 Google Chrome 6.0.450.3 Google Chrome 6.0.450.2 Google Chrome 6.0.450.1 Google Chrome 6.0.450.0 Google Chrome 6.0.449.0 Google Chrome 6.0.447.2 Google Chrome 6.0.447.1 Google Chrome 6.0.447.0 Google Chrome 6.0.446.0 Google Chrome 6.0.445.1 Google Chrome 6.0.445.0 Google Chrome 6.0.444.0 Google Chrome 6.0.443.0 Google Chrome 6.0.441.0 Google Chrome 6.0.440.0 Google Chrome 6.0.438.0 Google Chrome 6.0.437.3 Google Chrome 6.0.437.2 Google Chrome 6.0.437.1 Google Chrome 6.0.437.0 Google Chrome 6.0.436.0 Google Chrome 6.0.435.0 Google Chrome 6.0.434.0 Google Chrome 6.0.433.0 Google Chrome 6.0.432.0 Google Chrome 6.0.431.0 Google Chrome 6.0.430.0 Google Chrome 6.0.428.0 Google Chrome 6.0.427.0 Google Chrome 6.0.426.0 Google Chrome 6.0.425.0 Google Chrome 6.0.424.0 Google Chrome 6.0.423.0 Google Chrome 6.0.422.0 Google Chrome 6.0.421.0 Google Chrome 6.0.419.0 Google Chrome 6.0.418.9 Google Chrome 6.0.418.8 Google Chrome 6.0.418.7 Google Chrome 6.0.418.6 Google Chrome 6.0.418.5 Google Chrome 6.0.418.4 Google Chrome 6.0.418.3 Google Chrome 6.0.418.2 Google Chrome 6.0.418.1 Google Chrome 6.0.418.0 Google Chrome 6.0.417.0 Google Chrome 6.0.416.1 Google Chrome 6.0.416.0 Google Chrome 6.0.415.1 Google Chrome 6.0.415.0 Google Chrome 6.0.414.0 Google Chrome 6.0.413.0 Google Chrome 6.0.412.0 Google Chrome 6.0.411.0 Google Chrome 6.0.410.0 Google Chrome 6.0.409.0 Google Chrome 6.0.408.9 Google Chrome 6.0.408.8 Google Chrome 6.0.408.7 Google Chrome 6.0.408.6 Google Chrome 6.0.408.5 Google Chrome 6.0.408.4 Google Chrome 6.0.408.3 Google Chrome 6.0.408.2 Google Chrome 6.0.408.10 Google Chrome 6.0.408.1 Google Chrome 6.0.408.0 Google Chrome 6.0.407.0 Google Chrome 6.0.406.0 Google Chrome 6.0.405.0 Google Chrome 6.0.404.2 Google Chrome 6.0.404.1 Google Chrome 6.0.404.0 Google Chrome 6.0.403.0 Google Chrome 6.0.401.1 Google Chrome 6.0.401.0 Google Chrome 6.0.400.0 Google Chrome 6.0.399.0 Google Chrome 6.0.398.0 Google Chrome 6.0.397.0 Google Chrome 5.0.396.0 Google Chrome 5.0.395.0 Google Chrome 5.0.394.0 Google Chrome 5.0.393.0 Google Chrome 5.0.392.0 Google Chrome 5.0.391.0 Google Chrome 5.0.390.0 Google Chrome 5.0.387.0 Google Chrome 5.0.386.0 Google Chrome 5.0.385.0 Google Chrome 5.0.384.0 Google Chrome 5.0.383.0 Google Chrome 5.0.382.3 Google Chrome 5.0.382.0 Google Chrome 5.0.381.0 Google Chrome 5.0.380.0 Google Chrome 5.0.379.0 Google Chrome 5.0.378.0 Google Chrome 5.0.376.0 Google Chrome 5.0.375.98 Google Chrome 5.0.375.97 Google Chrome 5.0.375.96 Google Chrome 5.0.375.95 Google Chrome 5.0.375.94 Google Chrome 5.0.375.93 Google Chrome 5.0.375.92 Google Chrome 5.0.375.91 Google Chrome 5.0.375.90 Google Chrome 5.0.375.9 Google Chrome 5.0.375.89 Google Chrome 5.0.375.88 Google Chrome 5.0.375.87 Google Chrome 5.0.375.85 Google Chrome 5.0.375.84 Google Chrome 5.0.375.83 Google Chrome 5.0.375.82 Google Chrome 5.0.375.81 Google Chrome 5.0.375.80 Google Chrome 5.0.375.8 Google Chrome 5.0.375.79 Google Chrome 5.0.375.78 Google Chrome 5.0.375.77 Google Chrome 5.0.375.76 Google Chrome 5.0.375.75 Google Chrome 5.0.375.74 Google Chrome 5.0.375.73 Google Chrome 5.0.375.72 Google Chrome 5.0.375.71 Google Chrome 5.0.375.7 Google Chrome 5.0.375.69 Google Chrome 5.0.375.68 Google Chrome 5.0.375.67 Google Chrome 5.0.375.66 Google Chrome 5.0.375.65 Google Chrome 5.0.375.64 Google Chrome 5.0.375.63 Google Chrome 5.0.375.62 Google Chrome 5.0.375.61 Google Chrome 5.0.375.60 Google Chrome 5.0.375.6 Google Chrome 5.0.375.59 Google Chrome 5.0.375.58 Google Chrome 5.0.375.57 Google Chrome 5.0.375.56 Google Chrome 5.0.375.54 Google Chrome 5.0.375.53 Google Chrome 5.0.375.52 Google Chrome 5.0.375.51 Google Chrome 5.0.375.50 Google Chrome 5.0.375.5 Google Chrome 5.0.375.49 Google Chrome 5.0.375.48 Google Chrome 5.0.375.47 Google Chrome 5.0.375.46 Google Chrome 5.0.375.45 Google Chrome 5.0.375.44 Google Chrome 5.0.375.43 Google Chrome 5.0.375.42 Google Chrome 5.0.375.41 Google Chrome 5.0.375.40 Google Chrome 5.0.375.4 Google Chrome 5.0.375.39 Google Chrome 5.0.375.38 Google Chrome 5.0.375.37 Google Chrome 5.0.375.36 Google Chrome 5.0.375.35 Google Chrome 5.0.375.34 Google Chrome 5.0.375.33 Google Chrome 5.0.375.32 Google Chrome 5.0.375.31 Google Chrome 5.0.375.30 Google Chrome 5.0.375.3 Google Chrome 5.0.375.29 Google Chrome 5.0.375.28 Google Chrome 5.0.375.27 Google Chrome 5.0.375.26 Google Chrome 5.0.375.25 Google Chrome 5.0.375.23 Google Chrome 5.0.375.22 Google Chrome 5.0.375.21 Google Chrome 5.0.375.20 Google Chrome 5.0.375.2 Google Chrome 5.0.375.19 Google Chrome 5.0.375.18 Google Chrome 5.0.375.17 Google Chrome 5.0.375.16 Google Chrome 5.0.375.15 Google Chrome 5.0.375.14 Google Chrome 5.0.375.13 Google Chrome 5.0.375.126 Google Chrome 5.0.375.12 Google Chrome 5.0.375.11 Google Chrome 5.0.375.10 Google Chrome 5.0.375.1 Google Chrome 5.0.375.0 Google Chrome 5.0.374.0 Google Chrome 5.0.373.0 Google Chrome 5.0.372.0 Google Chrome 5.0.371.0 Google Chrome 5.0.370.0 Google Chrome 5.0.369.2 Google Chrome 5.0.369.1 Google Chrome 5.0.369.0 Google Chrome 5.0.368.0 Google Chrome 5.0.367.0 Google Chrome 5.0.366.4 Google Chrome 5.0.366.3 Google Chrome 5.0.366.2 Google Chrome 5.0.366.1 Google Chrome 5.0.366.0 Google Chrome 5.0.365.0 Google Chrome 5.0.364.0 Google Chrome 5.0.363.0 Google Chrome 5.0.362.0 Google Chrome 5.0.361.0 Google Chrome 5.0.360.5 Google Chrome 5.0.360.4 Google Chrome 5.0.360.3 Google Chrome 5.0.360.0 Google Chrome 5.0.359.0 Google Chrome 5.0.358.0 Google Chrome 5.0.357.0 Google Chrome 5.0.356.2 Google Chrome 5.0.356.1 Google Chrome 5.0.356.0 Google Chrome 5.0.355.0 Google Chrome 5.0.354.1 Google Chrome 5.0.354.0 Google Chrome 5.0.353.0 Google Chrome 5.0.351.0 Google Chrome 5.0.350.1 Google Chrome 5.0.350.0 Google Chrome 5.0.349.0 Google Chrome 5.0.348.0 Google Chrome 5.0.347.0 Google Chrome 5.0.346.0 Google Chrome 5.0.345.0 Google Chrome 5.0.344.0 Google Chrome 5.0.343.0 Google Chrome 5.0.342.9 Google Chrome 5.0.342.8 Google Chrome 5.0.342.7 Google Chrome 5.0.342.6 Google Chrome 5.0.342.5 Google Chrome 5.0.342.4 Google Chrome 5.0.342.3 Google Chrome 5.0.342.2 Google Chrome 5.0.342.1 Google Chrome 5.0.342.0 Google Chrome 5.0.341.0 Google Chrome 5.0.340.0 Google Chrome 5.0.339.0 Google Chrome 5.0.338.0 Google Chrome 5.0.337.0 Google Chrome 5.0.336.0 Google Chrome 5.0.335.4 Google Chrome 5.0.335.3 Google Chrome 5.0.335.2 Google Chrome 5.0.335.1 Google Chrome 5.0.335.0 Google Chrome 5.0.334.0 Google Chrome 5.0.333.0 Google Chrome 5.0.332.0 Google Chrome 5.0.330.0 Google Chrome 5.0.329.0 Google Chrome 5.0.328.0 Google Chrome 5.0.327.0 Google Chrome 5.0.326.0 Google Chrome 5.0.325.0 Google Chrome 5.0.324.0 Google Chrome 5.0.323.0 Google Chrome 5.0.322.2 Google Chrome 5.0.322.1 Google Chrome 5.0.322.0 Google Chrome 5.0.321.0 Google Chrome 5.0.320.0 Google Chrome 5.0.319.0 Google Chrome 5.0.318.0 Google Chrome 5.0.317.2 Google Chrome 5.0.317.1 Google Chrome 5.0.317.0 Google Chrome 5.0.316.0 Google Chrome 5.0.315.0 Google Chrome 5.0.314.1 Google Chrome 5.0.314.0 Google Chrome 5.0.313.0 Google Chrome 5.0.309.0 Google Chrome 5.0.308.0 Google Chrome 5.0.307.9 Google Chrome 5.0.307.8 Google Chrome 5.0.307.7 Google Chrome 5.0.307.6 Google Chrome 5.0.307.5 Google Chrome 5.0.307.4 Google Chrome 5.0.307.3 Google Chrome 5.0.307.11 Google Chrome 5.0.307.10 Google Chrome 5.0.307.1 Google Chrome 5.0.306.1 Google Chrome 5.0.306.0 Gentoo Linux Apple Mac OS X Server 10.6.4 Apple Mac OS X Server 10.6.3 Apple Mac OS X Server 10.6.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.5.8 Apple Mac OS X Server 10.5.7 Apple Mac OS X Server 10.5.6 Apple Mac OS X Server 10.5.5 Apple Mac OS X Server 10.5.4 Apple Mac OS X Server 10.5.3 Apple Mac OS X Server 10.5.2 Apple Mac OS X Server 10.5.1 Apple Mac OS X Server 10.5 Apple Mac OS X Server 10.6 Apple Mac OS X Server 10.5 Apple Mac OS X 10.6.4 Apple Mac OS X 10.6.3 Apple Mac OS X 10.6.2 Apple Mac OS X 10.6.1 Apple Mac OS X 10.5.8 Apple Mac OS X 10.5.7 Apple Mac OS X 10.5.6 Apple Mac OS X 10.5.5 Apple Mac OS X 10.5.4 Apple Mac OS X 10.5.3 Apple Mac OS X 10.5.2 Apple Mac OS X 10.5.1 Apple Mac OS X 10.5 Apple Mac OS X 10.6 Apple Mac OS X 10.5 Adobe Reader 9.3.4 Adobe Reader 9.3.3 Adobe Reader 9.3.2 Adobe Reader 9.3.1 Adobe Reader 9.1.3 Adobe Reader 9.1.2 Adobe Reader 9.1.1 Adobe Reader 9.4 Adobe Reader 9.3 Adobe Reader 9.2 Adobe Reader 9.1 Adobe Reader 9 Adobe Flash Player 10.1.53 .64 Adobe Flash Player 10.1.51 .66 Adobe Flash Player 10.0.45 2 Adobe Flash Player 10.0.45 2 Adobe Flash Player 10.0.45 2 Adobe Flash Player 10.0.32 18 Adobe Flash Player 10.0.22 .87 Adobe Flash Player 10.0.15 .3 Adobe Flash Player 10.0.12 .36 Adobe Flash Player 10.0.12 .35 Adobe Flash Player 9.0.262 Adobe Flash Player 9.0.246 0 Adobe Flash Player 9.0.152 .0 Adobe Flash Player 9.0.151 .0 Adobe Flash Player 9.0.124 .0 Adobe Flash Player 9.0.48.0 Adobe Flash Player 9.0.47.0 Adobe Flash Player 9.0.45.0 Adobe Flash Player 9.0.31.0 Adobe Flash Player 9.0.280 Adobe Flash Player 9.0.28.0 Adobe Flash Player 9.0.277.0 Adobe Flash Player 9.0.260.0 Adobe Flash Player 9.0.246.0 Adobe Flash Player 9.0.159.0 Adobe Flash Player 9.0.115.0 Adobe Flash Player 9 Adobe Flash Player 8.0.35.0 Adobe Flash Player 8.0.34.0 Adobe Flash Player 8 Adobe Flash Player 7.0.70.0 Adobe Flash Player 7.0.69.0 Adobe Flash Player 7 Adobe Flash Player 10.1.95.2 Adobe Flash Player 10.1.95.1 Adobe Flash Player 10.1.92.10 Adobe Flash Player 10.1.92.10 Adobe Flash Player 10.1.85.3 Adobe Flash Player 10.1.82.76 Adobe Flash Player 10.1 Release Candida Adobe Flash Player 10.0.42.34 Adobe Flash Player 10.0.32.18 Adobe Flash Player 10 Adobe AIR 2.0.4 Adobe AIR 2.0.3 Adobe AIR 1.5.3 .9130 Adobe AIR 1.5.3 .9120 Adobe AIR 1.5.3 Adobe AIR 1.5.2 Adobe AIR 1.5.1 Adobe AIR 2.0.3 Adobe AIR 2.0.2.12610 Adobe AIR 2.0.2 Adobe AIR 1.5 Adobe AIR 1.1 Adobe AIR 1.01 Adobe AIR 1.0 Adobe Acrobat Standard 9.3.4 Adobe Acrobat Standard 9.3.3 Adobe Acrobat Standard 9.3.2 Adobe Acrobat Standard 9.3.1 Adobe Acrobat Standard 9.1.3 Adobe Acrobat Standard 9.1.2 Adobe Acrobat Standard 9.4 Adobe Acrobat Standard 9.3 Adobe Acrobat Standard 9.2 Adobe Acrobat Standard 9.1 Adobe Acrobat Standard 9 Adobe Acrobat Reader (for Linux) 9.3.3 Adobe Acrobat Professional 9.3.4 Adobe Acrobat Professional 9.3.3 Adobe Acrobat Professional 9.3.2 Adobe Acrobat Professional 9.3.1 Adobe Acrobat Professional 9.1.3 Adobe Acrobat Professional 9.1.2 Adobe Acrobat Professional 9.4 Adobe Acrobat Professional 9.3 Adobe Acrobat Professional 9.2 Adobe Acrobat Professional 9.1 Adobe Acrobat Professional 9 Extended Adobe Acrobat Professional 9 Adobe Acrobat 9.3.3 Adobe Acrobat 9.3.2 Adobe Acrobat 9.3.1 Adobe Acrobat 9.1.1 Adobe Acrobat 8.2.4 Adobe Acrobat 9.4 Adobe Acrobat 9.3 Adobe Acrobat 9.2 |
| Not Vulnerable: |
Apple Mac OS X Server 10.6.5 Adobe Reader 9.4.1 Adobe Flash Player 9.0.289.0 Adobe Flash Player 10.1.105.6 Adobe Flash Player 10.1.102.64 Adobe AIR 2.5.1 Adobe Acrobat Standard 9.4.1 Adobe Acrobat Professional 9.4.1 Adobe Acrobat 9.4.1 |
Discussion
Adobe Acrobat, Reader, and Flash CVE-2010-3654 Remote Code Execution Vulnerability
Adobe Acrobat, Reader, and Flash are prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application.
The following products are affected:
Adobe Flash Player 10.1.85.3 and prior for Windows, Mac OS X, Linux, and Solaris
Adobe Flash Player 10.1.95.2 and prior for Android
Adobe Reader 9.4 and prior for Windows, Mac OS X, and Unix
Adobe Acrobat 9.4 and prior for Windows and Mac OS X
Adobe Acrobat, Reader, and Flash are prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the user running the affected application.
The following products are affected:
Adobe Flash Player 10.1.85.3 and prior for Windows, Mac OS X, Linux, and Solaris
Adobe Flash Player 10.1.95.2 and prior for Android
Adobe Reader 9.4 and prior for Windows, Mac OS X, and Unix
Adobe Acrobat 9.4 and prior for Windows and Mac OS X
Exploit / POC
Adobe Acrobat, Reader, and Flash CVE-2010-3654 Remote Code Execution Vulnerability
This issue is actively being exploited in the wild against Reader and Acrobat.
The following exploit code is available:
This issue is actively being exploited in the wild against Reader and Acrobat.
The following exploit code is available:
Solution / Fix
Adobe Acrobat, Reader, and Flash CVE-2010-3654 Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references for more information.
Apple Mac OS X Server 10.6
Solution:
Updates are available. Please see the references for more information.
Apple Mac OS X Server 10.6
-
Apple MacOSXServUpdCombo10.6.5.dmg
For Mac OS X Server v10.6 - v10.6.3
http://www.apple.com/support/downloads/
References
Adobe Acrobat, Reader, and Flash CVE-2010-3654 Remote Code Execution Vulnerability
References:
References:
- Adobe Homepage (Adobe)
- Multiple Vulnerabilities in Adobe Flash Player (Oracle)
- Adobe Security Advisory APSA10-05 (Adobe)
- APSB10-26 Security update available for Adobe Flash Player (Adobe)
- APSB10-28 Security updates available for Adobe Reader and Acrobat (Adobe)
- VU#298081 Adobe Flash code execution vulnerability (US-CERT)