CVE-2010-2173

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via…

published June 15, 2010

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

⚠️ Watch out for an invalid pointer vulnerability in older versions of Adobe Flash Player and AIR! This sneaky bug can potentially let attackers execute arbitrary code. 🔥 Think of it like a waiter who misplaces an order — instead of delivering your meal, they might accidentally serve a dish designed to make you sick. If the pointer isn't correctly managed, the wrong code could be executed, causing all sorts of trouble! An attacker could exploit this vulnerability to execute malicious code, which could lead to unauthorized access and system compromise. While it may not be actively exploited at this time, the implications of arbitrary code execution can be absolutely devastating.

Put simply

Think of it like a waiter who misplaces an order — instead of delivering your meal, they might accidentally serve a dish designed to make you sick. If the pointer isn't correctly managed, the wrong code could be executed, causing all sorts of trouble! This vulnerability stems from the improper handling of pointers within Adobe Flash Player and AIR, specifically related to the newclass operator. When exploited, it can allow attackers to manipulate program execution in unexpected ways.

What to do

An attacker could exploit this vulnerability to execute malicious code, which could lead to unauthorized access and system compromise. While it may not be actively exploited at this time, the implications of arbitrary code execution can be absolutely devastating. To protect yourself, update Adobe Flash Player to version 10.1.53.64 or later and Adobe AIR to at least 2.0.2.12610. If you're running older versions, it’s crucial to uninstall them and switch to supported alternatives. You've got this! Follow these steps, and you'll leave this vulnerability in the dust! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07440 · 94.4th percentile
Published
2010-06-15T17:48Z
EPSS history
Timeline
  • 15 JUN 17:48Z
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via…
    cvelistv5