RHSA-2010:0464: flash-plugin security update

TI-2010-01252 CVE-2010-1297 · GHSA-cv7g-qpjc-66p7

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before…

CRITICAL 93KEV

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.82531 Published 2010-06-08 Fixed CWE-787

TI-2008-04337 CVE-2008-4546 · GHSA-5xqh-j4c7-9pg5

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before…

MEDIUM 56

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a differe…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.65868 Published 2008-10-14 Fixed CWE-399

TI-2010-02079 CVE-2010-2167 · GHSA-qqv9-8j6v-jccf

Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x…

MEDIUM 52

Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08995 Published 2010-06-15 Fixed CWE-119

TI-2009-03603 CVE-2009-3793 · GHSA-rffw-455m-rfhp

Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before…

MEDIUM 52

Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or possibly execute arbitr…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.09371 Published 2010-06-15 Fixed CWE-399

TI-2010-02097 CVE-2010-2185 · GHSA-9qf3-m5jr-899m

Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and…

MEDIUM 51

Buffer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08719 Published 2010-06-15 Fixed CWE-119

TI-2010-02100 CVE-2010-2188 · GHSA-xh96-5xc9-3w5h

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before…

MEDIUM 50

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by calling the Action…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06751 Published 2010-06-15 Fixed CWE-119

TI-2010-02098 CVE-2010-2186 · GHSA-q246-grrp-j42h

Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before…

MEDIUM 50

Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (application crash) or possibly execute arbitra…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06743 Published 2010-06-15 Fixed CWE-94

TI-2010-02095 CVE-2010-2183 · GHSA-vm96-4qrg-6r96

Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and…

MEDIUM 50

Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability tha…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0744 Published 2010-06-15 Fixed CWE-189

TI-2010-02093 CVE-2010-2181 · GHSA-8xwf-9fxw-xh59

Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and…

MEDIUM 50

Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability tha…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0744 Published 2010-06-15 Fixed CWE-189

TI-2010-02086 CVE-2010-2174 · GHSA-cv59-f4p2-3vrq

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before…

MEDIUM 50

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0744 Published 2010-06-15 Fixed CWE-119

TI-2010-02085 CVE-2010-2173 · GHSA-qg98-326c-86rg

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before…

MEDIUM 50

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0744 Published 2010-06-15 Fixed CWE-119

TI-2010-02083 CVE-2010-2171 · GHSA-wm7h-9238-9p4m

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before…

MEDIUM 50

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors related t…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06751 Published 2010-06-15 Fixed CWE-119

TI-2010-02082 CVE-2010-2170 · GHSA-whpq-x3wf-fq4q

Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and…

MEDIUM 50

Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability tha…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0744 Published 2010-06-15 Fixed CWE-189

TI-2010-02076 CVE-2010-2164 · GHSA-3qcw-5j3f-5872

Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before…

MEDIUM 50

Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unsp…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.0744 Published 2010-06-15 Fixed CWE-399

TI-2010-02075 CVE-2010-2163 · GHSA-366v-v593-vgfm

Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x…

MEDIUM 50

Multiple unspecified vulnerabilities in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unknown vectors.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07127 Published 2010-06-15 Fixed CWE-94

TI-2010-02074 CVE-2010-2162 · GHSA-46xq-3hp8-fm2c

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before…

MEDIUM 50

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors rela…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06751 Published 2010-06-15 Fixed CWE-119

TI-2010-02073 CVE-2010-2161 · GHSA-998q-gh7x-jc4m

Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and…

MEDIUM 50

Array index error in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified "types of Adobe Flash code."

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.07127 Published 2010-06-15 Fixed CWE-94

TI-2010-02072 CVE-2010-2160 · GHSA-j8jx-4gq3-2fmw

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before…

MEDIUM 50

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an invalid offset…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06751 Published 2010-06-15 Fixed CWE-119

TI-2010-02099 CVE-2010-2187 · GHSA-hgcv-r3v9-7mc9

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before…

MEDIUM 49

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vecto…