High severity7.8CISA KEVNVD Advisory· Published Jun 8, 2010· Updated Jun 16, 2026
CVE-2010-1297
CVE-2010-1297
Description
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*range: >=8.0,<8.2.3
- (no CPE)range: <9.3.3 and <8.2.3
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*range: <9.0.277.0
- (no CPE)range: <9.0.277.0 and <10.1.53.64
cpe:2.3:o:suse:linux_enterprise:10.0:sp3:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:suse:linux_enterprise:10.0:sp3:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*
- cpe:2.3:o:suse:linux_enterprise:11.0:sp1:*:*:*:*:*:*
- Range: <9.3.3 and <8.2.3
Patches
Vulnerability mechanics
References
44- blog.zynamics.com/2010/06/09/analyzing-the-currently-exploited-0-day-for-adobe-reader-and-adobe-flash/nvdExploit
- lists.apple.com/archives/security-announce/2010//Nov/msg00000.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.htmlnvdMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlnvdMailing ListThird Party Advisory
- secunia.com/advisories/40026nvdBroken LinkVendor Advisory
- secunia.com/advisories/40034nvdBroken LinkVendor Advisory
- security.gentoo.org/glsa/glsa-201101-09.xmlnvdThird Party Advisory
- securitytracker.com/idnvdBroken LinkThird Party AdvisoryVDB Entry
- securitytracker.com/idnvdBroken LinkThird Party AdvisoryVDB Entry
- securitytracker.com/idnvdBroken LinkThird Party AdvisoryVDB Entry
- securitytracker.com/idnvdBroken LinkThird Party AdvisoryVDB Entry
- www.adobe.com/support/security/advisories/apsa10-01.htmlnvdVendor Advisory
- www.exploit-db.com/exploits/13787nvdThird Party AdvisoryVDB Entry
- www.kb.cert.org/vuls/id/486225nvdThird Party AdvisoryUS Government Resource
- www.securityfocus.com/bid/40586nvdBroken LinkThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/40759nvdBroken LinkThird Party AdvisoryVDB Entry
- www.us-cert.gov/cas/techalerts/TA10-159A.htmlnvdThird Party AdvisoryUS Government Resource
- www.us-cert.gov/cas/techalerts/TA10-162A.htmlnvdThird Party AdvisoryUS Government Resource
- www.vupen.com/english/advisories/2010/1348nvdBroken LinkVendor Advisory
- www.vupen.com/english/advisories/2010/1349nvdBroken LinkVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/59137nvdThird Party AdvisoryVDB Entry
- community.websense.com/blogs/securitylabs/archive/2010/06/09/having-fun-with-adobe-0-day-exploits.aspxnvdBroken Link
- itrc.hp.com/service/cki/docDisplay.donvdBroken Link
- secunia.com/advisories/40144nvdBroken Link
- secunia.com/advisories/40545nvdBroken Link
- secunia.com/advisories/43026nvdBroken Link
- support.apple.com/kb/HT4435nvdBroken Link
- www.adobe.com/support/security/bulletins/apsb10-14.htmlnvdNot Applicable
- www.adobe.com/support/security/bulletins/apsb10-15.htmlnvdNot Applicable
- www.osvdb.org/65141nvdBroken Link
- www.redhat.com/support/errata/RHSA-2010-0464.htmlnvdBroken Link
- www.redhat.com/support/errata/RHSA-2010-0470.htmlnvdBroken Link
- www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txtnvdBroken Link
- www.vupen.com/english/advisories/2010/1421nvdBroken Link
- www.vupen.com/english/advisories/2010/1432nvdBroken Link
- www.vupen.com/english/advisories/2010/1434nvdBroken Link
- www.vupen.com/english/advisories/2010/1453nvdBroken Link
- www.vupen.com/english/advisories/2010/1482nvdBroken Link
- www.vupen.com/english/advisories/2010/1522nvdBroken Link
- www.vupen.com/english/advisories/2010/1636nvdBroken Link
- www.vupen.com/english/advisories/2010/1793nvdBroken Link
- www.vupen.com/english/advisories/2011/0192nvdBroken Link
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7116nvdBroken Link
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.