Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-1297
HistoryJun 08, 2010 - 6:30 p.m.

CVE-2010-1297

2010-06-0818:30:10
CWE-787
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

0.355 Low

EPSS

Percentile

97.2%

JSON

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

Affected configurations

NVD
Node
adobeairRange<2.0.2.12610
OR
adobeflash_playerRange<9.0.277.0
OR
adobeflash_playerRange10.0–10.1.53.64
Node
adobeacrobatRange8.0–8.2.3
OR
adobeacrobatRange9.0–9.3.3
AND
applemac_os_xMatch-
OR
microsoftwindowsMatch-
Node
opensuseopensuseRange11.0–11.2
OR
suselinux_enterpriseMatch10.0sp3
OR
suselinux_enterpriseMatch11.0-
OR
suselinux_enterpriseMatch11.0sp1

References

Related

saint 4
seebug 4
exploitpack 2
openvas 20
checkpoint_advisories 4
packetstorm 3
threatpost 2
canvas 1
metasploit 2
cert 1
securityvulns 6
prion 1
ubuntucve 1
cisa_kev 1
cvelist 1
cve 1
attackerkb 1
exploitdb 4
thn 1
nessus 25
redhat 3
suse 2
securelist 1
freebsd 1
gentoo 2
saint
saint
Adobe Reader authplay.dll newfunction Memory Corruption
2010-06-17 00:00:00
Adobe Reader authplay.dll newfunction Memory Corruption
2010-06-17 00:00:00
Adobe Reader authplay.dll newfunction Memory Corruption
2010-06-17 00:00:00
seebug
seebug
Adobe Acrobat Reader and Flash Player - “newclass” invalid pointer
2014-07-02 00:00:00
Adobe Flash Player "newfunction" Invalid Pointer Use
2014-07-01 00:00:00
0day Exploit for Adobe Flash and Reader PoC (from the wild)
2010-06-09 00:00:00
exploitpack
exploitpack
Adobe Acrobat Reader and Flash Player - newclass Invalid Pointer
2010-09-01 00:00:00
Adobe Flash Reader - Live Malware
2010-06-09 00:00:00
openvas
openvas
Adobe Products Remote Code Execution Vulnerability (Jun 2010) - Windows
2010-06-15 00:00:00
Adobe Products Remote Code Execution Vulnerability - jun10 (Windows)
2010-06-15 00:00:00
Adobe Products Remote Code Execution Vulnerability (Jun 2010) - Linux
2010-06-15 00:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Multiple Products authplay.dll PDF File Code Execution - Ver2 (CVE-2010-1297)
2014-03-31 00:00:00
Adobe Multiple Products authplay.dll PDF File Code Execution (APSA10-01; CVE-2010-1297)
2010-06-10 00:00:00
Adobe Flash Player authplay.dll Component Code Execution (APSA10-01; CVE-2010-1297)
2010-06-07 00:00:00
packetstorm
packetstorm
Adobe Flash Player newfucntion Invalid Pointer Use
2010-06-15 00:00:00
Month Of Abysssec Undisclosed Bugs - Adobe Reader / Flash Invalid Pointer
2010-09-01 00:00:00
Adobe Flash Player newfunction Invalid Pointer Use
2010-06-15 00:00:00
threatpost
threatpost
Adobe to Release Flash Patch June 10
2010-06-08 10:56:42
Adobe Warns of Flash, PDF Zero Day Attack
2010-06-05 03:10:19
canvas
canvas
Immunity Canvas: FLASH_NEWFUNCTION
2010-06-08 18:30:00
metasploit
metasploit
Adobe Flash Player "newfunction" Invalid Pointer Use
2010-06-10 20:28:05
Adobe Flash Player "newfunction" Invalid Pointer Use
2010-06-10 19:52:43
cert
cert
Adobe Flash ActionScript AVM2 newfunction vulnerability
2010-06-07 00:00:00
securityvulns
securityvulns
Security Advisory for Flash Player, Adobe Reader and Acrobat
2010-06-11 00:00:00
US-CERT Technical Cyber Security Alert TA10-162A -- Adobe Flash and AIR Vulnerabilities
2010-06-12 00:00:00
Adobe Flash Player / Acrobat / Reader memory corruptions
2010-06-26 00:00:00
prion
prion
Memory corruption
2010-06-08 18:30:00
ubuntucve
ubuntucve
CVE-2010-1297
2010-06-08 00:00:00
cisa_kev
cisa_kev
Adobe Flash Player Memory Corruption Vulnerability
2022-06-08 00:00:00
cvelist
cvelist
CVE-2010-1297
2010-06-08 18:00:00
cve
cve
CVE-2010-1297
2010-06-08 18:30:10
attackerkb
attackerkb
CVE-2010-1297
2010-06-08 00:00:00
exploitdb
exploitdb
Adobe Flash Player - &#039;newfunction&#039; Invalid Pointer Use (Metasploit) (1)
2010-09-20 00:00:00
Adobe Flash / Reader - Live Malware
2010-06-09 00:00:00
Adobe Flash Player - &#039;newfunction&#039; Invalid Pointer Use (Metasploit) (2)
2010-09-25 00:00:00
thn
thn
Bleeding Life 2 Exploit Pack Released
2011-10-24 04:30:00
nessus
nessus
SuSE 10 Security Update : acroread (ZYPP Patch Number 7086)
2011-01-27 00:00:00
Adobe Acrobat < 9.3.3 / 8.2.3 Multiple Vulnerabilities (APSB10-15)
2010-06-30 00:00:00
Adobe Reader < 9.3.3 / 8.2.3 Multiple Vulnerabilities (APSB10-15)
2010-06-30 00:00:00
redhat
redhat
(RHSA-2010:0503) Critical: acroread security update
2010-06-30 00:00:00
(RHSA-2010:0464) Critical: flash-plugin security update
2010-06-11 00:00:00
(RHSA-2010:0470) Critical: flash-plugin security update
2010-06-14 00:00:00
suse
suse
remote code execution in acroread
2010-07-08 11:59:38
remote code execution in flash-player
2010-06-11 17:44:20
securelist
securelist
Investigation Report for the September 2014 Equation malware detection incident in the US
2017-11-16 10:00:34
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2008-10-02 00:00:00
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2010-09-07 00:00:00
Adobe Flash Player: Multiple vulnerabilities
2011-01-21 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.7 High

AI Score

Confidence

Low

0.355 Low

EPSS

Percentile

97.2%

JSON
Related for NVD:CVE-2010-1297
saint4seebug4exploitpack2openvas20checkpoint_advisories4packetstorm3threatpost2canvas1metasploit2cert1securityvulns6prion1ubuntucve1cisa_kev1cvelist1cve1attackerkb1exploitdb4thn1nessus25redhat3suse2securelist1freebsd1gentoo2