9.3

CVE-2010-3654

Exploit
Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
AdobeFlash Player Version <= 10.1.85.3
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version6.0.21.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version6.0.79
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version7.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version7.0.1
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version7.0.25
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version7.0.63
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version7.0.69.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version7.0.70.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version7.1
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version7.1.1
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version7.2
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version8.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version8.0.22.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version8.0.24.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version8.0.33.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version8.0.34.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version8.0.35.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version8.0.39.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version8.0.42.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.16
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.18d60
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.20
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.20.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.28
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.28.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.31
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.31.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.45.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.47.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.48.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.112.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.114.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.115.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.124.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.125.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.151.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.152.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.159.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.246.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.0.260.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version9.125.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version10.0.0.584
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version10.0.12.10
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version10.0.12.36
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version10.0.15.3
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version10.0.22.87
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version10.0.32.18
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version10.0.42.34
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version10.0.45.2
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version10.1.52.14.1
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version10.1.52.15
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version10.1.53.64
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version10.1.82.76
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
MacromediaFlash Player Version5.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
MacromediaFlash Player Version5.0_r50
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
MacromediaFlash Player Version6.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
MacromediaFlash Player Version6.0.29.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
MacromediaFlash Player Version6.0.40.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
MacromediaFlash Player Version6.0.47.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
MacromediaFlash Player Version6.0.65.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
MacromediaFlash Player Version6.0.79.0
   ApplemacOS X
   LinuxLinux Kernel
   MicrosoftWindows
   OracleSolaris
AdobeFlash Player Version <= 10.1.95.2
   GoogleAndroid
AdobeFlash Player Version6.0.21.0
   GoogleAndroid
AdobeFlash Player Version6.0.79
   GoogleAndroid
AdobeFlash Player Version7.0
   GoogleAndroid
AdobeFlash Player Version7.0.1
   GoogleAndroid
AdobeFlash Player Version7.0.25
   GoogleAndroid
AdobeFlash Player Version7.0.63
   GoogleAndroid
AdobeFlash Player Version7.0.69.0
   GoogleAndroid
AdobeFlash Player Version7.0.70.0
   GoogleAndroid
AdobeFlash Player Version7.1
   GoogleAndroid
AdobeFlash Player Version7.1.1
   GoogleAndroid
AdobeFlash Player Version7.2
   GoogleAndroid
AdobeFlash Player Version8.0
   GoogleAndroid
AdobeFlash Player Version8.0.22.0
   GoogleAndroid
AdobeFlash Player Version8.0.24.0
   GoogleAndroid
AdobeFlash Player Version8.0.33.0
   GoogleAndroid
AdobeFlash Player Version8.0.34.0
   GoogleAndroid
AdobeFlash Player Version8.0.35.0
   GoogleAndroid
AdobeFlash Player Version8.0.39.0
   GoogleAndroid
AdobeFlash Player Version8.0.42.0
   GoogleAndroid
AdobeFlash Player Version9.0.16
   GoogleAndroid
AdobeFlash Player Version9.0.18d60
   GoogleAndroid
AdobeFlash Player Version9.0.20
   GoogleAndroid
AdobeFlash Player Version9.0.20.0
   GoogleAndroid
AdobeFlash Player Version9.0.28
   GoogleAndroid
AdobeFlash Player Version9.0.28.0
   GoogleAndroid
AdobeFlash Player Version9.0.31
   GoogleAndroid
AdobeFlash Player Version9.0.31.0
   GoogleAndroid
AdobeFlash Player Version9.0.45.0
   GoogleAndroid
AdobeFlash Player Version9.0.47.0
   GoogleAndroid
AdobeFlash Player Version9.0.48.0
   GoogleAndroid
AdobeFlash Player Version9.0.112.0
   GoogleAndroid
AdobeFlash Player Version9.0.114.0
   GoogleAndroid
AdobeFlash Player Version9.0.115.0
   GoogleAndroid
AdobeFlash Player Version9.0.124.0
   GoogleAndroid
AdobeFlash Player Version9.0.125.0
   GoogleAndroid
AdobeFlash Player Version9.0.151.0
   GoogleAndroid
AdobeFlash Player Version9.0.152.0
   GoogleAndroid
AdobeFlash Player Version9.0.159.0
   GoogleAndroid
AdobeFlash Player Version9.0.246.0
   GoogleAndroid
AdobeFlash Player Version9.0.260.0
   GoogleAndroid
AdobeFlash Player Version9.125.0
   GoogleAndroid
AdobeFlash Player Version10.0.0.584
   GoogleAndroid
AdobeFlash Player Version10.0.12.10
   GoogleAndroid
AdobeFlash Player Version10.0.12.36
   GoogleAndroid
AdobeFlash Player Version10.0.15.3
   GoogleAndroid
AdobeFlash Player Version10.0.22.87
   GoogleAndroid
AdobeFlash Player Version10.0.32.18
   GoogleAndroid
AdobeFlash Player Version10.0.42.34
   GoogleAndroid
AdobeFlash Player Version10.0.45.2
   GoogleAndroid
AdobeFlash Player Version10.1.52.14.1
   GoogleAndroid
AdobeFlash Player Version10.1.52.15
   GoogleAndroid
AdobeFlash Player Version10.1.53.64
   GoogleAndroid
AdobeFlash Player Version10.1.82.76
   GoogleAndroid
AdobeFlash Player Version10.1.85.3
   GoogleAndroid
AdobeFlash Player Version10.1.92.8
   GoogleAndroid
AdobeFlash Player Version10.1.92.10
   GoogleAndroid
MacromediaFlash Player Version5.0
   GoogleAndroid
MacromediaFlash Player Version5.0_r50
   GoogleAndroid
MacromediaFlash Player Version6.0
   GoogleAndroid
MacromediaFlash Player Version6.0.29.0
   GoogleAndroid
MacromediaFlash Player Version6.0.40.0
   GoogleAndroid
MacromediaFlash Player Version6.0.47.0
   GoogleAndroid
MacromediaFlash Player Version6.0.65.0
   GoogleAndroid
MacromediaFlash Player Version6.0.79.0
   GoogleAndroid
AdobeAcrobat Version9.0
AdobeAcrobat Version9.1
AdobeAcrobat Version9.1.1
AdobeAcrobat Version9.1.2
AdobeAcrobat Version9.1.3
AdobeAcrobat Version9.2
AdobeAcrobat Version9.3
AdobeAcrobat Version9.3.1
AdobeAcrobat Version9.3.2
AdobeAcrobat Version9.3.3
AdobeAcrobat Version9.3.4
AdobeAcrobat Version9.4
AdobeAcrobat Reader Version9.0
AdobeAcrobat Reader Version9.1
AdobeAcrobat Reader Version9.1.1
AdobeAcrobat Reader Version9.1.2
AdobeAcrobat Reader Version9.1.3
AdobeAcrobat Reader Version9.2
AdobeAcrobat Reader Version9.3
AdobeAcrobat Reader Version9.3.1
AdobeAcrobat Reader Version9.3.2
AdobeAcrobat Reader Version9.3.3
AdobeAcrobat Reader Version9.3.4
AdobeAcrobat Reader Version9.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 69.68% 0.993
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
http://secunia.com/advisories/43026
http://security.gentoo.org/glsa/glsa-201101-09.xml
http://support.apple.com/kb/HT4435
http://www.vupen.com/english/advisories/2011/0192
http://secunia.com/advisories/43025
http://security.gentoo.org/glsa/glsa-201101-08.xml
http://www.turbolinux.co.jp/security/2011/TLSA-2011-2j.txt
http://www.vupen.com/english/advisories/2011/0191
http://www.vupen.com/english/advisories/2011/0344
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00002.html
http://www.adobe.com/support/security/bulletins/apsb10-26.html
http://www.vupen.com/english/advisories/2010/2903
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1
http://contagiodump.blogspot.com/2010/10/potential-new-adobe-flash-player-zero.html
Exploit
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00001.html
http://secunia.com/advisories/41917
Vendor Advisory
http://secunia.com/advisories/42030
http://secunia.com/advisories/42183
http://secunia.com/advisories/42401
http://secunia.com/advisories/42926
http://securityreason.com/securityalert/8210
http://www.adobe.com/support/security/advisories/apsa10-05.html
Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb10-28.html
http://www.kb.cert.org/vuls/id/298081
US Government Resource
http://www.redhat.com/support/errata/RHSA-2010-0829.html
http://www.redhat.com/support/errata/RHSA-2010-0834.html
http://www.redhat.com/support/errata/RHSA-2010-0867.html
http://www.redhat.com/support/errata/RHSA-2010-0934.html
http://www.securityfocus.com/bid/44504
http://www.securitytracker.com/id?1024659
http://www.securitytracker.com/id?1024660
http://www.vupen.com/english/advisories/2010/2906
http://www.vupen.com/english/advisories/2010/2918
http://www.vupen.com/english/advisories/2010/3111
http://www.vupen.com/english/advisories/2011/0173
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13294