Unscored severity · published Oct 29, 2010
CVE-2010-3654
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or…
–
CVSS
69.7%
EPSS
No
On KEV
Description
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.
Exploitation
Is it being used?
Exploit prediction (EPSS)69.7% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Acrobat · Adobe
9.0; 9.1; 9.1.1; 9.1.2; 9.1.3; 9.2; +6 more · source: NVD
AR
Acrobat Reader · Adobe
9.0; 9.1; 9.1.1; 9.1.2; 9.1.3; 9.2; +6 more · source: NVD
FP
Flash Player · Adobe
through 10.1.85.3; 6.0.21.0; 6.0.79; 7.0; 7.0.1; 7.0.25; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3654
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3654
blogs.sun.com
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1
Exploit
http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html
lists.apple.com
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html
Vendor Advisory
http://secunia.com/advisories/41917
More from Acrobat
9.8
CVE-2014-0546
Adobe Reader and Acrobat Sandbox Bypass Vulnerability
9.8
CVE-2013-3346
Adobe Reader and Acrobat Memory Corruption Vulnerability
9.8
CVE-2013-2729
Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability
9.8
CVE-2011-2462
Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability
8.8
CVE-2021-28550
Adobe Acrobat Reader use after free vulnerability could lead to arbitrary code execution