Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a "null pointer vulnerability."
CVSS Details
- CVSS 3.1 Base Score: 8.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Air | — | Upgrade to the latest version of Adobe AIR | Mar 21, 2012 | Jul 31, 2009 |
| Adobe Flash Apsb09 10 | — | Upgrade to Adobe Flash Player version 10.0.32.18 for WindowsUpgrade to Adobe Flash Player version 9.0.246.0 for WindowsUpgrade to Adobe Flash Player version 10.0.32.18 for LinuxUpgrade to Adobe Flash Player version 9.0.246.0 for Mac OS XUpgrade to Adobe Flash Player version 9.0.246.0 for LinuxUpgrade to Adobe Flash Player version 10.0.32.18 for Mac OS X | Nov 19, 2012 | Jul 31, 2009 |
| Adobe Reader Apsb09 10 | — | — | Apr 12, 2012 | Jul 31, 2009 |
| Apple Osx Flashplayerplugin | — | Upgrade macOS to the latest version | Dec 16, 2011 | Jul 31, 2009 |
| Gentoo Linux | — | Upgrade app-text/acroread.Upgrade www-plugins/adobe-flash. | Oct 30, 2017 | Jul 31, 2009 |
| Suse | — | Upgrade flash-player-gnomeUpgrade flash-player | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade flashplugin-nonfreeUpgrade adobe-flashplugin | Nov 19, 2024 | Jul 31, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub