Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
seebugRootSSV:20218
HistoryNov 01, 2010 - 12:00 a.m.

Adobe Flash Player authplay.dll库PDF文件解析远程代码执行漏洞

2010-11-0100:00:00
Root
www.seebug.org
51
adobe flash player
pdf文件
远程代码执行
漏洞
内存破坏
恶意flash内容
adobe acrobat
adobe reader
临时解决方法
浏览器
javascript
internet explorer
microsoft windows
厂商补丁
exploit

EPSS

0.973

Percentile

99.9%

JSON

BUGTRAQ ID: 44504
CVE ID: CVE-2010-3654

Flash Player是一款非常流行的FLASH播放器。

Flash Player的authplay.dll库在解析畸形PDF文件时存在内存破坏漏洞，用户受骗打开了内嵌有恶意Flash内容的PDF文件时就可以触发这个漏洞，导致执行任意代码。

Adobe Acrobat 9.4
Adobe Flash Player 10.1.95.2
Adobe Flash Player 10.1.85.3
Adobe Reader 9.4
临时解决方法：

  • 在浏览器中禁用Flash，禁止显示PDF文档。

  • 在Adobe Reader 9中禁用Flash和3D & Multimedia支持。

  • 在Adobe Reader和Acrobat中禁用JavaScript。

  • 禁止Internet Explorer自动打开PDF文档。

  • 在Microsoft Windows中启用DEP。

厂商补丁：

Adobe

目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：

http://www.adobe.com

Related

seebug 2
cve 1
metasploit 1
nessus 29
symantec 1
cvelist 1
openvas 16
saint 4
packetstorm 1
prion 1
checkpoint_advisories 2
nvd 1
threatpost 3
ubuntucve 1
exploitpack 1
exploitdb 2
canvas 1
cert 1
redhat 4
suse 2
securityvulns 3
freebsd 1
gentoo 2
securelist 1
seebug
seebug
Adobe Flash Player "Button" Remote Code Execution
2014-07-01 00:00:00
Adobe Flash Player < 10.1.53 .64 Action Script Type Confusion Exploit (DEP+ASLR bypass)
2014-07-01 00:00:00
cve
cve
CVE-2010-3654
2010-10-29 19:00:02
metasploit
metasploit
Adobe Flash Player "Button" Remote Code Execution
2010-11-01 22:34:13
nessus
nessus
Adobe Acrobat 9 <= 9.4 (APSA10-05)
2010-10-28 00:00:00
SuSE 10 Security Update : flash-player (ZYPP Patch Number 7223)
2011-01-27 00:00:00
Adobe Reader 9 <= 9.4 (APSA10-05)
2010-10-28 00:00:00
symantec
symantec
Adobe Acrobat, Reader, and Flash CVE-2010-3654 Remote Code Execution Vulnerability
2010-10-28 00:00:00
cvelist
cvelist
CVE-2010-3654
2010-10-29 18:00:00
openvas
openvas
Adobe Products Content Code Execution Vulnerability (Windows)
2010-11-10 00:00:00
Adobe Products Content Code Execution Vulnerability (CVE-2010-3654) - Windows
2010-11-10 00:00:00
Adobe Products Content Code Execution Vulnerability (Linux)
2010-11-10 00:00:00
saint
saint
Adobe Flash Player Flash Content Parsing Code Execution
2010-11-16 00:00:00
Adobe Flash Player Flash Content Parsing Code Execution
2010-11-16 00:00:00
Adobe Flash Player Flash Content Parsing Code Execution
2010-11-16 00:00:00
packetstorm
packetstorm
Adobe Flash Player "Button" Remote Code Execution
2010-11-03 00:00:00
prion
prion
Memory corruption
2010-10-29 19:00:00
checkpoint_advisories
checkpoint_advisories
Workaround for Adobe Flash Player Flash Content Parsing Code Execution Vulnerability (APSA10-05)
2010-11-01 00:00:00
Adobe Flash Player Flash Content Parsing Code Execution (APSA10-05; CVE-2010-3654)
2010-11-01 00:00:00
nvd
nvd
CVE-2010-3654
2010-10-29 19:00:02
threatpost
threatpost
Adobe Releases Emergency Fix for Critical Reader Flaws
2010-11-16 19:41:53
Adobe Accelerates Patch Schedule for Critical Flash Bug
2010-11-02 19:15:03
New Adobe Flash Bug Being Exploited
2010-10-28 14:03:47
ubuntucve
ubuntucve
CVE-2010-3654
2010-10-29 00:00:00
exploitpack
exploitpack
Adobe Flash Player 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)
2011-04-19 00:00:00
exploitdb
exploitdb
Adobe Flash Player - &#039;Button&#039; Arbitrary Code Execution (Metasploit)
2010-11-01 00:00:00
Adobe Flash Player &lt; 10.1.53.64 - Action Script Type Confusion (ASLR + DEP Bypass)
2011-04-19 00:00:00
canvas
canvas
Immunity Canvas: ADOBE_FLASH_BUTTON
2010-10-29 19:00:00
cert
cert
Adobe Flash code execution vulnerability
2010-10-28 00:00:00
redhat
redhat
(RHSA-2010:0934) Critical: acroread security update
2010-12-01 00:00:00
(RHSA-2010:0829) Critical: flash-plugin security update
2010-11-05 00:00:00
(RHSA-2010:0834) Critical: flash-plugin security update
2010-11-08 00:00:00
suse
suse
remote code execution in acoread
2010-12-08 17:17:01
remote code execution in flash-player
2010-11-05 13:12:10
securityvulns
securityvulns
Security update available for Adobe Flash Player
2010-11-08 00:00:00
Adobe Flash Player multiple security vulnerabilities
2010-11-08 00:00:00
About the security content of Mac OS X v10.6.5 and Security Update 2010-007
2010-11-18 00:00:00
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2010-09-28 00:00:00
gentoo
gentoo
Adobe Reader: Multiple vulnerabilities
2011-01-21 00:00:00
Adobe Flash Player: Multiple vulnerabilities
2011-01-21 00:00:00
securelist
securelist
Investigation Report for the September 2014 Equation malware detection incident in the US
2017-11-16 10:00:34

EPSS

0.973

Percentile

99.9%

JSON
Related for SSV:20218
seebug2cve1metasploit1nessus29symantec1cvelist1openvas16saint4packetstorm1prion1checkpoint_advisories2nvd1threatpost3ubuntucve1exploitpack1exploitdb2canvas1cert1redhat4suse2securityvulns3freebsd1gentoo2securelist1