CVE-2010-1297

Executive Summary

Informations
Name	CVE-2010-1297	First vendor Publication	2010-06-08
Vendor	Cve	Last vendor Modification	2012-11-05

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1297

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:7116

Oval ID:	oval:org.mitre.oval:def:7116
Title:	Adobe Flash Player, Acrobat Reader, and Acrobat 'authplay.dll' Remote Code Execution Vulnerability
Description:	Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-1297	Version:	17
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Adobe Flash Player Adobe Reader Adobe Acrobat
Definition Synopsis:
Vulnerable version of Adobe Flash Player Adobe Flash Player before 9.0.277.0 installed Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than 9.0.277.0 OR Adobe Flash Player 10.x through 10.0.45.2 installed Adobe Flash Player 10 is installed AND Adobe Flash Player version installed on the system is less than or equal to 10.0.45.2 OR Adobe Reader 8 Adobe Reader 8 Series is installed AND Adobe Reader 8, the sub-version is vulnerable Adobe Reader is less than 8.2.3 AND Adobe Reader library is less than 8.2.3 OR Adobe Reader 9 Adobe Reader 9 Series is installed AND Adobe Reader 9, the sub-version is vulnerable Adobe Reader is less than 9.3.3 AND Adobe Reader library is less than 9.3.3 OR Adobe Acrobat 8 Adobe Acrobat 8 Series is installed AND Adobe Acrobat 8, the sub-version is vulnerable Adobe Acrobat is less than 8.2.3 AND Adobe Acrobat library is less than 8.2.3 OR Adobe Acrobat 9 Adobe Acrobat 9 Series is installed AND Adobe Acrobat 9, the sub-version is vulnerable Adobe Acrobat is less than 9.3.3 AND Adobe Acrobat library is less than 9.3.3

CPE : Common Platform Enumeration

Type	Description	Count
Application	Adobe Acrobat cpe:/a:adobe:acrobat:9.3.2 cpe:/a:adobe:acrobat:9.3.1 cpe:/a:adobe:acrobat:9.3 cpe:/a:adobe:acrobat:9.2 cpe:/a:adobe:acrobat:9.1.3 cpe:/a:adobe:acrobat:9.1.2 cpe:/a:adobe:acrobat:9.1.1 cpe:/a:adobe:acrobat:9.1 cpe:/a:adobe:acrobat:9.0	9
Application	Adobe Acrobat Reader cpe:/a:adobe:acrobat_reader:9.3.2 cpe:/a:adobe:acrobat_reader:9.3.1 cpe:/a:adobe:acrobat_reader:9.3 cpe:/a:adobe:acrobat_reader:9.2 cpe:/a:adobe:acrobat_reader:9.1.3 cpe:/a:adobe:acrobat_reader:9.1.2 cpe:/a:adobe:acrobat_reader:9.1.1 cpe:/a:adobe:acrobat_reader:9.1 cpe:/a:adobe:acrobat_reader:9.0	9
Application	Adobe Flash Player cpe:/a:adobe:flash_player:10.0.45.2 cpe:/a:adobe:flash_player:10.0.42.34 cpe:/a:adobe:flash_player:10.0.32.18 cpe:/a:adobe:flash_player:10.0.22.87 cpe:/a:adobe:flash_player:10.0.15.3 cpe:/a:adobe:flash_player:10.0.12.36 cpe:/a:adobe:flash_player:10.0.12.10 cpe:/a:adobe:flash_player:10.0.0.584 cpe:/a:adobe:flash_player:9.0.48.0 cpe:/a:adobe:flash_player:9.0.47.0 cpe:/a:adobe:flash_player:9.0.45.0 cpe:/a:adobe:flash_player:9.0.31.0 cpe:/a:adobe:flash_player:9.0.31 cpe:/a:adobe:flash_player:9.0.28.0 cpe:/a:adobe:flash_player:9.0.28 cpe:/a:adobe:flash_player:9.0.262.0 cpe:/a:adobe:flash_player:9.0.260.0 cpe:/a:adobe:flash_player:9.0.246.0 cpe:/a:adobe:flash_player:9.0.20.0 cpe:/a:adobe:flash_player:9.0.20 cpe:/a:adobe:flash_player:9.0.18d60 cpe:/a:adobe:flash_player:9.0.16 cpe:/a:adobe:flash_player:9.0.159.0 cpe:/a:adobe:flash_player:9.0.152.0 cpe:/a:adobe:flash_player:9.0.151.0 cpe:/a:adobe:flash_player:9.0.125.0 cpe:/a:adobe:flash_player:9.0.124.0 cpe:/a:adobe:flash_player:9.0.115.0 cpe:/a:adobe:flash_player:9.0.114.0 cpe:/a:adobe:flash_player:9.0.112.0	30

SAINT Exploits

Description	Link
Adobe Reader authplay.dll newfunction Memory Corruption	More info here

ExploitDB Exploits

id	Description
2010-09-25	Adobe Flash Player "newfunction" Invalid Pointer Use
2010-09-20	Adobe Flash Player "newfunction" Invalid Pointer Use
2010-09-01	MOAUB #1 - Adobe Acrobat Reader and Flash Player
2010-06-09	0day Exploit for Adobe Flash and Reader PoC (from the wild)

Open Source Vulnerability Database (OSVDB)

id	Description
65141	Adobe Multiple Products SWF Handling Arbitrary Code Execution

Metasploit Database

id	Description
2010-06-04	Adobe Flash Player "newfunction" Invalid Pointer Use
2010-06-04	Adobe Flash Player "newfunction" Invalid Pointer Use

Internal Sources (Detail)

Source	Url
APPLE	http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
BID	http://www.securityfocus.com/bid/40586 http://www.securityfocus.com/bid/40759
CERT	http://www.us-cert.gov/cas/techalerts/TA10-159A.html http://www.us-cert.gov/cas/techalerts/TA10-162A.html
CERT-VN	http://www.kb.cert.org/vuls/id/486225
CONFIRM	http://support.apple.com/kb/HT4435 http://www.adobe.com/support/security/advisories/apsa10-01.html http://www.adobe.com/support/security/bulletins/apsb10-14.html http://www.adobe.com/support/security/bulletins/apsb10-15.html
EXPLOIT-DB	http://www.exploit-db.com/exploits/13787
GENTOO	http://security.gentoo.org/glsa/glsa-201101-09.xml
HP	http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751 http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
MISC	http://blog.zynamics.com/2010/06/09/analyzing-the-currently-exploited-0-day-f... http://community.websense.com/blogs/securitylabs/archive/2010/06/09/having-fu...
OSVDB	http://www.osvdb.org/65141
REDHAT	http://www.redhat.com/support/errata/RHSA-2010-0464.html http://www.redhat.com/support/errata/RHSA-2010-0470.html
SECTRACK	http://securitytracker.com/id?1024057 http://securitytracker.com/id?1024058 http://securitytracker.com/id?1024085 http://securitytracker.com/id?1024086
SECUNIA	http://secunia.com/advisories/40026 http://secunia.com/advisories/40034 http://secunia.com/advisories/40144 http://secunia.com/advisories/40545 http://secunia.com/advisories/43026
SUSE	http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
TURBO	http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt
VUPEN	http://www.vupen.com/english/advisories/2010/1348 http://www.vupen.com/english/advisories/2010/1349 http://www.vupen.com/english/advisories/2010/1421 http://www.vupen.com/english/advisories/2010/1432 http://www.vupen.com/english/advisories/2010/1434 http://www.vupen.com/english/advisories/2010/1453 http://www.vupen.com/english/advisories/2010/1482 http://www.vupen.com/english/advisories/2010/1522 http://www.vupen.com/english/advisories/2010/1636 http://www.vupen.com/english/advisories/2010/1793 http://www.vupen.com/english/advisories/2011/0192
XF	http://xforce.iss.net/xforce/xfdb/59137

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-06-11 17:25:11	Multiple Updates
2013-06-11 13:25:32	Multiple Updates
2013-06-10 13:25:27	Multiple Updates
2013-06-10 09:25:20	Multiple Updates
2013-06-08 05:26:38	Multiple Updates
2013-06-07 21:25:03	Multiple Updates
2013-06-06 13:25:55	Multiple Updates
2013-06-06 05:24:31	Multiple Updates
2013-06-04 17:26:02	Multiple Updates
2013-06-04 13:25:13	Multiple Updates
2013-06-03 21:27:40	Multiple Updates
2013-06-03 17:21:47	Multiple Updates
2013-06-03 13:26:03	Multiple Updates
2013-06-03 05:22:12	Multiple Updates
2013-05-31 21:26:00	Multiple Updates
2013-05-31 17:21:51	Multiple Updates
2013-05-30 17:24:45	Multiple Updates
2013-05-30 13:21:54	Multiple Updates
2013-05-10 23:21:56	Multiple Updates
2013-05-01 17:22:37	Multiple Updates
2013-05-01 13:28:05	Multiple Updates
2013-05-01 09:22:46	Multiple Updates
2013-05-01 05:38:31	Multiple Updates
2012-11-07 05:19:28	Multiple Updates

Global Informations

Type	Count
Oval ID(s)	1
CPE ID(s)	48
Saint Exploit(s)	1
osvdb(s)	1
ExploitDB Exploit(s)	4
Metasploit Exploit(s)	2

Related	Severity
GLSA-201009-05	(Critical)
VU#486225	(Critical)
TA10-162A	(Critical)
TA10-159A	(Critical)
RHSA-2010:0503	(Critical)
RHSA-2010:0470	(Critical)
RHSA-2010:0464	(Critical)
HPSBMA02547 SSR...	(Critical)
GLSA-201101-09	(Critical)

Same Subject	Severity
Login to view 116 more Alert(s)

CVE-2010-1297

Executive Summary

Security-Database Scoring CVSS v2

Detail

Original Source

OVAL Definitions

CPE : Common Platform Enumeration

SAINT Exploits

ExploitDB Exploits

Open Source Vulnerability Database (OSVDB)

Metasploit Database

Internal Sources (Detail)

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU