CVE-2010-2213

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of…

published August 11, 2010

CVSS
—
EPSS
5%
Percentile
91.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky memory corruption bug lies in Adobe Flash Player versions before 9.0.280 and 10.x before 10.1.82.76, allowing attackers to execute arbitrary code. 🔥 Think of it like a restaurant kitchen where one untrained chef can add any ingredient to any dish without a supervisor noticing — chaos could ensue! An attacker could use this vulnerability to run malicious code, potentially causing a denial of service or worse. If exploited, it could lead to complete compromise of the system where Flash Player is running, leaving users vulnerable and data at risk.

Put simply

Think of it like a restaurant kitchen where one untrained chef can add any ingredient to any dish without a supervisor noticing — chaos could ensue! This vulnerability is linked to unspecified vectors that lead to memory corruption, allowing attackers the opportunity to execute arbitrary code within the context of the affected application.

What to do

An attacker could use this vulnerability to run malicious code, potentially causing a denial of service or worse. If exploited, it could lead to complete compromise of the system where Flash Player is running, leaving users vulnerable and data at risk. Update Adobe Flash Player and Adobe AIR to versions 9.0.280, 10.1.82.76, and 2.0.3 or later immediately. If you're managing systems that utilize these applications, ensure they are configured to receive updates automatically to avoid exposure. You’ve got this! Keep your systems updated, and you’ll stay ahead of the curve! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04590 · 91.6th percentile
Published
2010-08-11T18:00Z
EPSS history
Timeline
  • 11 AUG 18:00Z
    Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of…
    cvelistv5