CVE-2010-2160

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory…

published June 15, 2010

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

⚠️ A charming little quirk in Adobe Flash Player can lead to memory corruption or even worse—arbitrary code execution! Talk about a party crasher! 🎉 Think of it as a waiter who brings you a dish that doesn’t match your order. Instead of the delicious meal you expected, you get a chaotic mix of ingredients that could spoil your whole dinner party. In this case, the invalid offset in ActionScript is like that miscommunication in the kitchen, leading to a real mess! This vulnerability could allow attackers to crash your application, leaving users in the lurch with a denial of service. Even more alarming is the potential for arbitrary code execution, meaning hackers could run malicious scripts on your system, wreaking havoc behind the scenes. It's a recipe for disaster!

Put simply

Think of it as a waiter who brings you a dish that doesn’t match your order. Instead of the delicious meal you expected, you get a chaotic mix of ingredients that could spoil your whole dinner party. In this case, the invalid offset in ActionScript is like that miscommunication in the kitchen, leading to a real mess! This vulnerability in Adobe Flash Player and Adobe AIR exploits a flaw in the ActionScript Virtual Machine 2 through an invalid offset in an undocumented opcode, enabling attackers to either crash the application or execute arbitrary code.

What to do

This vulnerability could allow attackers to crash your application, leaving users in the lurch with a denial of service. Even more alarming is the potential for arbitrary code execution, meaning hackers could run malicious scripts on your system, wreaking havoc behind the scenes. It's a recipe for disaster! To protect against this vulnerability, update your Adobe Flash Player to version 9.0.277.0 or later, and ensure Adobe AIR is at version 2.0.2.12610 or above. Always keep your software up to date to fend off threats like this. 🛡️ You've got this! A little diligence goes a long way in safeguarding your systems! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06751 · 93.9th percentile
Published
2010-06-15T17:48Z
EPSS history
Timeline
  • 15 JUN 17:48Z
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory…
    cvelistv5