Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Air | — | Upgrade to the latest version of Adobe AIR | Mar 21, 2012 | Jun 8, 2010 |
| Adobe Reader Apsb10 15 | — | — | Apr 12, 2012 | Jun 8, 2010 |
| Adobe Unspec Bof | — | Upgrade to Adobe Flash Player version 10.1.53.64 for WindowsUpgrade to Adobe Flash Player version 9.0.277.0 for Mac OS XUpgrade to Adobe Flash Player version 9.0.277.0 for WindowsUpgrade to Adobe Flash Player version 9.0.277.0 for LinuxUpgrade to Adobe Flash Player version 10.1.53.64 for LinuxUpgrade to Adobe Flash Player version 10.1.53.64 for Mac OS X | Jun 10, 2010 | Jun 4, 2010 |
| Apple Osx Flashplayerplugin | — | Apply OS X security update 2010-007Upgrade macOS to the latest version | Dec 16, 2011 | Jun 8, 2010 |
| Freebsd | — | Upgrade linux-f8-flashpluginUpgrade linux-f10-flashpluginUpgrade linux-flashplugin | Dec 10, 2025 | Jun 14, 2010 |
| Gentoo Linux | — | Upgrade app-text/acroread.Upgrade www-plugins/adobe-flash. | Oct 30, 2017 | Jun 8, 2010 |
| Hpsim | — | Upgrade to the latest version of HP Systems Insight Manager | Oct 13, 2015 | Jun 8, 2010 |
| Suse | — | Upgrade acroread_jaUpgrade flash-playerUpgrade acroread-fonts-jaUpgrade acroreadUpgrade acroread-fonts-zh_CNUpgrade acroread-fonts-koUpgrade acroread-cmapsUpgrade acroread-fonts-zh_TW | Feb 17, 2015 | Jun 8, 2010 |
| Ubuntu | — | Upgrade flashplugin-nonfreeUpgrade adobe-flashpluginUpgrade acroread | Nov 19, 2024 | Jun 8, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub