Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2010-3654
HistoryOct 29, 2010 - 7:00 p.m.

CVE-2010-3654

2010-10-2919:00:02
CWE-119
[email protected]
web.nvd.nist.gov
6

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.971

Percentile

99.8%

JSON

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.

Affected configurations

Nvd
Node
adobeflash_playerRange≀10.1.85.3
OR
adobeflash_playerMatch6.0.21.0
OR
adobeflash_playerMatch6.0.79
OR
adobeflash_playerMatch7.0
OR
adobeflash_playerMatch7.0.1
OR
adobeflash_playerMatch7.0.25
OR
adobeflash_playerMatch7.0.63
OR
adobeflash_playerMatch7.0.69.0
OR
adobeflash_playerMatch7.0.70.0
OR
adobeflash_playerMatch7.1
OR
adobeflash_playerMatch7.1.1
OR
adobeflash_playerMatch7.2
OR
adobeflash_playerMatch8.0
OR
adobeflash_playerMatch8.0.22.0
OR
adobeflash_playerMatch8.0.24.0
OR
adobeflash_playerMatch8.0.33.0
OR
adobeflash_playerMatch8.0.34.0
OR
adobeflash_playerMatch8.0.35.0
OR
adobeflash_playerMatch8.0.39.0
OR
adobeflash_playerMatch8.0.42.0
OR
adobeflash_playerMatch9.0.16
OR
adobeflash_playerMatch9.0.18d60
OR
adobeflash_playerMatch9.0.20
OR
adobeflash_playerMatch9.0.20.0
OR
adobeflash_playerMatch9.0.28
OR
adobeflash_playerMatch9.0.28.0
OR
adobeflash_playerMatch9.0.31
OR
adobeflash_playerMatch9.0.31.0
OR
adobeflash_playerMatch9.0.45.0
OR
adobeflash_playerMatch9.0.47.0
OR
adobeflash_playerMatch9.0.48.0
OR
adobeflash_playerMatch9.0.112.0
OR
adobeflash_playerMatch9.0.114.0
OR
adobeflash_playerMatch9.0.115.0
OR
adobeflash_playerMatch9.0.124.0
OR
adobeflash_playerMatch9.0.125.0
OR
adobeflash_playerMatch9.0.151.0
OR
adobeflash_playerMatch9.0.152.0
OR
adobeflash_playerMatch9.0.159.0
OR
adobeflash_playerMatch9.0.246.0
OR
adobeflash_playerMatch9.0.260.0
OR
adobeflash_playerMatch9.125.0
OR
adobeflash_playerMatch10.0.0.584
OR
adobeflash_playerMatch10.0.12.10
OR
adobeflash_playerMatch10.0.12.36
OR
adobeflash_playerMatch10.0.15.3
OR
adobeflash_playerMatch10.0.22.87
OR
adobeflash_playerMatch10.0.32.18
OR
adobeflash_playerMatch10.0.42.34
OR
adobeflash_playerMatch10.0.45.2
OR
adobeflash_playerMatch10.1.52.14.1
OR
adobeflash_playerMatch10.1.52.15
OR
adobeflash_playerMatch10.1.53.64
OR
adobeflash_playerMatch10.1.82.76
OR
macromediaflash_playerMatch5.0
OR
macromediaflash_playerMatch5.0_r50
OR
macromediaflash_playerMatch6.0
OR
macromediaflash_playerMatch6.0.29.0
OR
macromediaflash_playerMatch6.0.40.0
OR
macromediaflash_playerMatch6.0.47.0
OR
macromediaflash_playerMatch6.0.65.0
OR
macromediaflash_playerMatch6.0.79.0
AND
applemac_os_x
OR
linuxlinux_kernel
OR
microsoftwindows
OR
oraclesolaris
Node
adobeflash_playerRange≀10.1.95.2
OR
adobeflash_playerMatch6.0.21.0
OR
adobeflash_playerMatch6.0.79
OR
adobeflash_playerMatch7.0
OR
adobeflash_playerMatch7.0.1
OR
adobeflash_playerMatch7.0.25
OR
adobeflash_playerMatch7.0.63
OR
adobeflash_playerMatch7.0.69.0
OR
adobeflash_playerMatch7.0.70.0
OR
adobeflash_playerMatch7.1
OR
adobeflash_playerMatch7.1.1
OR
adobeflash_playerMatch7.2
OR
adobeflash_playerMatch8.0
OR
adobeflash_playerMatch8.0.22.0
OR
adobeflash_playerMatch8.0.24.0
OR
adobeflash_playerMatch8.0.33.0
OR
adobeflash_playerMatch8.0.34.0
OR
adobeflash_playerMatch8.0.35.0
OR
adobeflash_playerMatch8.0.39.0
OR
adobeflash_playerMatch8.0.42.0
OR
adobeflash_playerMatch9.0.16
OR
adobeflash_playerMatch9.0.18d60
OR
adobeflash_playerMatch9.0.20
OR
adobeflash_playerMatch9.0.20.0
OR
adobeflash_playerMatch9.0.28
OR
adobeflash_playerMatch9.0.28.0
OR
adobeflash_playerMatch9.0.31
OR
adobeflash_playerMatch9.0.31.0
OR
adobeflash_playerMatch9.0.45.0
OR
adobeflash_playerMatch9.0.47.0
OR
adobeflash_playerMatch9.0.48.0
OR
adobeflash_playerMatch9.0.112.0
OR
adobeflash_playerMatch9.0.114.0
OR
adobeflash_playerMatch9.0.115.0
OR
adobeflash_playerMatch9.0.124.0
OR
adobeflash_playerMatch9.0.125.0
OR
adobeflash_playerMatch9.0.151.0
OR
adobeflash_playerMatch9.0.152.0
OR
adobeflash_playerMatch9.0.159.0
OR
adobeflash_playerMatch9.0.246.0
OR
adobeflash_playerMatch9.0.260.0
OR
adobeflash_playerMatch9.125.0
OR
adobeflash_playerMatch10.0.0.584
OR
adobeflash_playerMatch10.0.12.10
OR
adobeflash_playerMatch10.0.12.36
OR
adobeflash_playerMatch10.0.15.3
OR
adobeflash_playerMatch10.0.22.87
OR
adobeflash_playerMatch10.0.32.18
OR
adobeflash_playerMatch10.0.42.34
OR
adobeflash_playerMatch10.0.45.2
OR
adobeflash_playerMatch10.1.52.14.1
OR
adobeflash_playerMatch10.1.52.15
OR
adobeflash_playerMatch10.1.53.64
OR
adobeflash_playerMatch10.1.82.76
OR
adobeflash_playerMatch10.1.85.3
OR
adobeflash_playerMatch10.1.92.8
OR
adobeflash_playerMatch10.1.92.10
OR
macromediaflash_playerMatch5.0
OR
macromediaflash_playerMatch5.0_r50
OR
macromediaflash_playerMatch6.0
OR
macromediaflash_playerMatch6.0.29.0
OR
macromediaflash_playerMatch6.0.40.0
OR
macromediaflash_playerMatch6.0.47.0
OR
macromediaflash_playerMatch6.0.65.0
OR
macromediaflash_playerMatch6.0.79.0
AND
googleandroid
Node
adobeacrobatMatch9.0
OR
adobeacrobatMatch9.1
OR
adobeacrobatMatch9.1.1
OR
adobeacrobatMatch9.1.2
OR
adobeacrobatMatch9.1.3
OR
adobeacrobatMatch9.2
OR
adobeacrobatMatch9.3
OR
adobeacrobatMatch9.3.1
OR
adobeacrobatMatch9.3.2
OR
adobeacrobatMatch9.3.3
OR
adobeacrobatMatch9.3.4
OR
adobeacrobatMatch9.4
OR
adobeacrobat_readerMatch9.0
OR
adobeacrobat_readerMatch9.1
OR
adobeacrobat_readerMatch9.1.1
OR
adobeacrobat_readerMatch9.1.2
OR
adobeacrobat_readerMatch9.1.3
OR
adobeacrobat_readerMatch9.2
OR
adobeacrobat_readerMatch9.3
OR
adobeacrobat_readerMatch9.3.1
OR
adobeacrobat_readerMatch9.3.2
OR
adobeacrobat_readerMatch9.3.3
OR
adobeacrobat_readerMatch9.3.4
OR
adobeacrobat_readerMatch9.4
VendorProductVersionCPE
adobeflash_player*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
adobeflash_player6.0.21.0cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:*
adobeflash_player6.0.79cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*
adobeflash_player7.0cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*
adobeflash_player7.0.1cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*
adobeflash_player7.0.25cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*
adobeflash_player7.0.63cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*
adobeflash_player7.0.69.0cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*
adobeflash_player7.0.70.0cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*
adobeflash_player7.1cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 941

References

Related

nessus 29
seebug 3
cvelist 1
symantec 1
openvas 16
metasploit 1
cve 1
saint 4
packetstorm 1
threatpost 3
checkpoint_advisories 2
prion 1
exploitpack 1
ubuntucve 1
cert 1
canvas 1
exploitdb 2
redhat 4
suse 2
freebsd 1
securityvulns 3
gentoo 2
securelist 1
nessus
nessus
Adobe Acrobat 9 <= 9.4 (APSA10-05)
2010-10-28 00:00:00
SuSE 10 Security Update : flash-player (ZYPP Patch Number 7223)
2011-01-27 00:00:00
Adobe Reader 9 <= 9.4 (APSA10-05)
2010-10-28 00:00:00
seebug
seebug
Adobe Flash Player "Button" Remote Code Execution
2014-07-01 00:00:00
Adobe Flash Player < 10.1.53 .64 Action Script Type Confusion Exploit (DEP+ASLR bypass)
2014-07-01 00:00:00
Adobe Flash Player authplay.dllεΊ“PDFζ–‡δ»Άθ§£ζžθΏœη¨‹δ»£η ζ‰§θ‘ŒζΌζ΄ž
2010-11-01 00:00:00
cvelist
cvelist
CVE-2010-3654
2010-10-29 18:00:00
symantec
symantec
Adobe Acrobat, Reader, and Flash CVE-2010-3654 Remote Code Execution Vulnerability
2010-10-28 00:00:00
openvas
openvas
Adobe Products Content Code Execution Vulnerability (Windows)
2010-11-10 00:00:00
Adobe Products Content Code Execution Vulnerability (CVE-2010-3654) - Windows
2010-11-10 00:00:00
Adobe Products Content Code Execution Vulnerability (Linux)
2010-11-10 00:00:00
metasploit
metasploit
Adobe Flash Player "Button" Remote Code Execution
2010-11-01 22:34:13
cve
cve
CVE-2010-3654
2010-10-29 19:00:02
saint
saint
Adobe Flash Player Flash Content Parsing Code Execution
2010-11-16 00:00:00
Adobe Flash Player Flash Content Parsing Code Execution
2010-11-16 00:00:00
Adobe Flash Player Flash Content Parsing Code Execution
2010-11-16 00:00:00
packetstorm
packetstorm
Adobe Flash Player "Button" Remote Code Execution
2010-11-03 00:00:00
threatpost
threatpost
Adobe Releases Emergency Fix for Critical Reader Flaws
2010-11-16 19:41:53
Adobe Accelerates Patch Schedule for Critical Flash Bug
2010-11-02 19:15:03
New Adobe Flash Bug Being Exploited
2010-10-28 14:03:47
checkpoint_advisories
checkpoint_advisories
Workaround for Adobe Flash Player Flash Content Parsing Code Execution Vulnerability (APSA10-05)
2010-11-01 00:00:00
Adobe Flash Player Flash Content Parsing Code Execution (APSA10-05; CVE-2010-3654)
2010-11-01 00:00:00
prion
prion
Memory corruption
2010-10-29 19:00:00
exploitpack
exploitpack
Adobe Flash Player 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)
2011-04-19 00:00:00
ubuntucve
ubuntucve
CVE-2010-3654
2010-10-29 00:00:00
cert
cert
Adobe Flash code execution vulnerability
2010-10-28 00:00:00
canvas
canvas
Immunity Canvas: ADOBE_FLASH_BUTTON
2010-10-29 19:00:00
exploitdb
exploitdb
Adobe Flash Player - &#039;Button&#039; Arbitrary Code Execution (Metasploit)
2010-11-01 00:00:00
Adobe Flash Player &lt; 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)
2011-04-19 00:00:00
redhat
redhat
(RHSA-2010:0934) Critical: acroread security update
2010-12-01 00:00:00
(RHSA-2010:0829) Critical: flash-plugin security update
2010-11-05 00:00:00
(RHSA-2010:0867) Critical: flash-plugin security update
2010-11-10 00:00:00
suse
suse
remote code execution in acoread
2010-12-08 17:17:01
remote code execution in flash-player
2010-11-05 13:12:10
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2010-09-28 00:00:00
securityvulns
securityvulns
Security update available for Adobe Flash Player
2010-11-08 00:00:00
Adobe Flash Player multiple security vulnerabilities
2010-11-08 00:00:00
About the security content of Mac OS X v10.6.5 and Security Update 2010-007
2010-11-18 00:00:00
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2011-01-21 00:00:00
Adobe Flash Player: Multiple vulnerabilities
2011-01-21 00:00:00
securelist
securelist
Investigation Report for the September 2014 Equation malware detection incident in the US
2017-11-16 10:00:34

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.971

Percentile

99.8%

JSON
Related for NVD:CVE-2010-3654
nessus29seebug3cvelist1symantec1openvas16metasploit1cve1saint4packetstorm1threatpost3checkpoint_advisories2prion1exploitpack1ubuntucve1cert1canvas1exploitdb2redhat4suse2freebsd1securityvulns3gentoo2securelist1