Unscored severity · published Jun 15, 2010
CVE-2010-2164
Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code…
–
CVSS
7.4%
EPSS
No
On KEV
Description
Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unspecified "image type within a certain function."
Exploitation
Is it being used?
Exploit prediction (EPSS)7.4% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Air · Adobe
through 1.5.3.9130; 1.0; 1.1; 1.5; 1.5.1; 1.5.2; +1 more · source: NVD
FP
Flash Player · Adobe
9.0.16; 9.0.20; 9.0.20.0; 9.0.28; 9.0.28.0; 9.0.31; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2164
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2164
itrc.hp.com
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=872
lists.apple.com
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
Vendor Advisory
http://secunia.com/advisories/40144
More from Air
8.8
CVE-2016-1010
Adobe Flash Player and AIR Integer Overflow Vulnerability
8.8
CVE-2015-8651
Adobe Flash Player Integer Overflow Vulnerability
8.8
CVE-2014-8439
Adobe Flash Player Dereferenced Pointer Vulnerability
8.8
CVE-2014-0502
Adobe Flash Player Double Free Vulnerablity
8.8
CVE-2011-0611
Adobe Flash Player Remote Code Execution Vulnerability