CVE-2010-1297

2010-06-0800:00:00

ubuntu.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.355 Low

EPSS

Percentile

97.1%

JSON

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR
before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x
before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute
arbitrary code or cause a denial of service (memory corruption) via crafted
SWF content, related to authplay.dll and the ActionScript Virtual Machine 2
(AVM2) newfunction instruction, as exploited in the wild in June 2010.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchacroread< 9.3.3-1hardy1UNKNOWN
ubuntu9.04noarchacroread< 9.3.3-1jaunty1UNKNOWN
ubuntu9.10noarchacroread< 9.3.3-1karmic1UNKNOWN
ubuntu10.04noarchacroread< 9.3.3-1lucid1UNKNOWN
ubuntu8.04noarchadobe-flashplugin< 10.1.53.64-1UNKNOWN
ubuntu9.04noarchadobe-flashplugin< 10.1.53.64-1jaunty1UNKNOWN
ubuntu9.10noarchadobe-flashplugin< 10.1.53.64-1karmic1UNKNOWN
ubuntu10.04noarchadobe-flashplugin< 10.1.53.64-1lucid1UNKNOWN
ubuntu8.04noarchflashplugin-nonfree< 10.0.1.218+really9.0.277.0ubuntu1UNKNOWN
ubuntu9.04noarchflashplugin-nonfree< 10.1.53.64ubuntu0.9.04.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	acroread	< 9.3.3-1hardy1	UNKNOWN
ubuntu	9.04	noarch	acroread	< 9.3.3-1jaunty1	UNKNOWN
ubuntu	9.10	noarch	acroread	< 9.3.3-1karmic1	UNKNOWN
ubuntu	10.04	noarch	acroread	< 9.3.3-1lucid1	UNKNOWN
ubuntu	8.04	noarch	adobe-flashplugin	< 10.1.53.64-1	UNKNOWN
ubuntu	9.04	noarch	adobe-flashplugin	< 10.1.53.64-1jaunty1	UNKNOWN
ubuntu	9.10	noarch	adobe-flashplugin	< 10.1.53.64-1karmic1	UNKNOWN
ubuntu	10.04	noarch	adobe-flashplugin	< 10.1.53.64-1lucid1	UNKNOWN
ubuntu	8.04	noarch	flashplugin-nonfree	< 10.0.1.218+really9.0.277.0ubuntu1	UNKNOWN
ubuntu	9.04	noarch	flashplugin-nonfree	< 10.1.53.64ubuntu0.9.04.1	UNKNOWN