CVE-2010-2884

Executive Summary

Informations
Name	CVE-2010-2884	First vendor Publication	2010-09-15
Vendor	Cve	Last vendor Modification	2011-07-18

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in September 2010.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2884

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:6852

Oval ID:	oval:org.mitre.oval:def:6852
Title:	Adobe Flash Player, Acrobat Reader, and Acrobat Remote Code Execution Vulnerability
Description:	Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in September 2010.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2884	Version:	14
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Adobe Flash Player Adobe Reader Adobe Acrobat
Definition Synopsis:
Vulnerable version of Adobe Flash Player Adobe Flash Player is installed AND Adobe Flash Player version installed on the system is less than or equal to 10.1.82.76 OR Adobe Reader 8 Adobe Reader 8 Series is installed AND Adobe Reader 8, the sub-version is vulnerable Adobe Reader is less than or equal to 8.2.4 AND Adobe Reader library is less than or equal to 8.2.4 OR Adobe Reader 9 Adobe Reader 9 Series is installed AND Adobe Reader 9, the sub-version is vulnerable Adobe Reader is less than or equal to 9.3.4 AND Adobe Reader library is less than or equal to 9.3.4 OR Adobe Acrobat 9 Adobe Acrobat 9 Series is installed AND Adobe Acrobat 9, the sub-version is vulnerable Adobe Acrobat is less than or equal to 9.3.4 AND Adobe Acrobat library is less than or equal to 9.3.4 OR Adobe Acrobat 8 Adobe Acrobat 8 Series is installed AND Adobe Acrobat 8, the sub-version is vulnerable Adobe Acrobat is less than or equal to 8.2.4 AND Adobe Acrobat library is less than or equal to 8.2.4

CPE : Common Platform Enumeration

Type	Description	Count
Application	Adobe Acrobat cpe:/a:adobe:acrobat:9.3.4 cpe:/a:adobe:acrobat:9.3.3 cpe:/a:adobe:acrobat:9.3.2 cpe:/a:adobe:acrobat:9.3.1 cpe:/a:adobe:acrobat:9.3 cpe:/a:adobe:acrobat:9.2 cpe:/a:adobe:acrobat:9.1.3 cpe:/a:adobe:acrobat:9.1.2 cpe:/a:adobe:acrobat:9.1.1 cpe:/a:adobe:acrobat:9.1 cpe:/a:adobe:acrobat:9.0 cpe:/a:adobe:acrobat:8.2.3 cpe:/a:adobe:acrobat:8.2.2 cpe:/a:adobe:acrobat:8.2.1 cpe:/a:adobe:acrobat:8.2 cpe:/a:adobe:acrobat:8.1.7 cpe:/a:adobe:acrobat:8.1.6 cpe:/a:adobe:acrobat:8.1.5 cpe:/a:adobe:acrobat:8.1.4 cpe:/a:adobe:acrobat:8.1.3 cpe:/a:adobe:acrobat:8.1.2 cpe:/a:adobe:acrobat:8.1.1 cpe:/a:adobe:acrobat:8.1 cpe:/a:adobe:acrobat:8.0.0 cpe:/a:adobe:acrobat:7.1.4 cpe:/a:adobe:acrobat:7.1.3 cpe:/a:adobe:acrobat:7.1.2 cpe:/a:adobe:acrobat:7.1.1 cpe:/a:adobe:acrobat:7.1.0 cpe:/a:adobe:acrobat:7.0.9 cpe:/a:adobe:acrobat:7.0.8 cpe:/a:adobe:acrobat:7.0.7 cpe:/a:adobe:acrobat:7.0.6 cpe:/a:adobe:acrobat:7.0.5 cpe:/a:adobe:acrobat:7.0.4 cpe:/a:adobe:acrobat:7.0.3 cpe:/a:adobe:acrobat:7.0.2 cpe:/a:adobe:acrobat:7.0.1 cpe:/a:adobe:acrobat:7.0 cpe:/a:adobe:acrobat:6.0.6 cpe:/a:adobe:acrobat:6.0.5 cpe:/a:adobe:acrobat:6.0.4 cpe:/a:adobe:acrobat:6.0.3 cpe:/a:adobe:acrobat:6.0.2 cpe:/a:adobe:acrobat:6.0.1 cpe:/a:adobe:acrobat:6.0 cpe:/a:adobe:acrobat:5.0.6 cpe:/a:adobe:acrobat:5.0.5 cpe:/a:adobe:acrobat:5.0.10 cpe:/a:adobe:acrobat:5.0 cpe:/a:adobe:acrobat:4.0.5c cpe:/a:adobe:acrobat:4.0.5a cpe:/a:adobe:acrobat:4.0.5 cpe:/a:adobe:acrobat:4.0 cpe:/a:adobe:acrobat:3.1 cpe:/a:adobe:acrobat:3.0	56
Application	Adobe Acrobat Reader cpe:/a:adobe:acrobat_reader:9.3.4 cpe:/a:adobe:acrobat_reader:9.3.3 cpe:/a:adobe:acrobat_reader:9.3.2 cpe:/a:adobe:acrobat_reader:9.3.1 cpe:/a:adobe:acrobat_reader:9.3 cpe:/a:adobe:acrobat_reader:9.2 cpe:/a:adobe:acrobat_reader:9.1.3 cpe:/a:adobe:acrobat_reader:9.1.2 cpe:/a:adobe:acrobat_reader:9.1.1 cpe:/a:adobe:acrobat_reader:9.1 cpe:/a:adobe:acrobat_reader:9.0 cpe:/a:adobe:acrobat_reader:8.2.3 cpe:/a:adobe:acrobat_reader:8.2.2 cpe:/a:adobe:acrobat_reader:8.2.1 cpe:/a:adobe:acrobat_reader:8.2 cpe:/a:adobe:acrobat_reader:8.1.7 cpe:/a:adobe:acrobat_reader:8.1.6 cpe:/a:adobe:acrobat_reader:8.1.5 cpe:/a:adobe:acrobat_reader:8.1.4 cpe:/a:adobe:acrobat_reader:8.1.2 cpe:/a:adobe:acrobat_reader:8.1.1 cpe:/a:adobe:acrobat_reader:8.1 cpe:/a:adobe:acrobat_reader:8.0 cpe:/a:adobe:acrobat_reader:7.1.0 cpe:/a:adobe:acrobat_reader:7.0.9 cpe:/a:adobe:acrobat_reader:7.0.8 cpe:/a:adobe:acrobat_reader:7.0.7 cpe:/a:adobe:acrobat_reader:7.0.6 cpe:/a:adobe:acrobat_reader:7.0.5 cpe:/a:adobe:acrobat_reader:7.0.4 cpe:/a:adobe:acrobat_reader:7.0.3 cpe:/a:adobe:acrobat_reader:7.0.2 cpe:/a:adobe:acrobat_reader:7.0.1 cpe:/a:adobe:acrobat_reader:7.0 cpe:/a:adobe:acrobat_reader:6.0.5 cpe:/a:adobe:acrobat_reader:6.0.4 cpe:/a:adobe:acrobat_reader:6.0.3 cpe:/a:adobe:acrobat_reader:6.0.2 cpe:/a:adobe:acrobat_reader:6.0.1 cpe:/a:adobe:acrobat_reader:6.0 cpe:/a:adobe:acrobat_reader:5.1 cpe:/a:adobe:acrobat_reader:5.0.9 cpe:/a:adobe:acrobat_reader:5.0.7 cpe:/a:adobe:acrobat_reader:5.0.6 cpe:/a:adobe:acrobat_reader:5.0.5 cpe:/a:adobe:acrobat_reader:5.0.11 cpe:/a:adobe:acrobat_reader:5.0.10 cpe:/a:adobe:acrobat_reader:5.0 cpe:/a:adobe:acrobat_reader:4.5 cpe:/a:adobe:acrobat_reader:4.0.5c cpe:/a:adobe:acrobat_reader:4.0.5a cpe:/a:adobe:acrobat_reader:4.0.5 cpe:/a:adobe:acrobat_reader:4.0 cpe:/a:adobe:acrobat_reader:3.02 cpe:/a:adobe:acrobat_reader:3.01 cpe:/a:adobe:acrobat_reader:3.0	56
Application	Adobe Flash Player cpe:/a:adobe:flash_player:10.1.92.10 cpe:/a:adobe:flash_player:10.1.82.76 cpe:/a:adobe:flash_player:10.0.42.34 cpe:/a:adobe:flash_player:10.0.32.18 cpe:/a:adobe:flash_player:10.0.22.87 cpe:/a:adobe:flash_player:10.0.15.3 cpe:/a:adobe:flash_player:10.0.12.36 cpe:/a:adobe:flash_player:10.0.12.10 cpe:/a:adobe:flash_player:10.0.0.584 cpe:/a:adobe:flash_player:9.125.0 cpe:/a:adobe:flash_player:9.0.48.0 cpe:/a:adobe:flash_player:9.0.47.0 cpe:/a:adobe:flash_player:9.0.45.0 cpe:/a:adobe:flash_player:9.0.31.0 cpe:/a:adobe:flash_player:9.0.31 cpe:/a:adobe:flash_player:9.0.28.0 cpe:/a:adobe:flash_player:9.0.28 cpe:/a:adobe:flash_player:9.0.260.0 cpe:/a:adobe:flash_player:9.0.246.0 cpe:/a:adobe:flash_player:9.0.20.0 cpe:/a:adobe:flash_player:9.0.20 cpe:/a:adobe:flash_player:9.0.18d60 cpe:/a:adobe:flash_player:9.0.16 cpe:/a:adobe:flash_player:9.0.159.0 cpe:/a:adobe:flash_player:9.0.152.0 cpe:/a:adobe:flash_player:9.0.151.0 cpe:/a:adobe:flash_player:9.0.125.0 cpe:/a:adobe:flash_player:9.0.124.0 cpe:/a:adobe:flash_player:9.0.115.0 cpe:/a:adobe:flash_player:9.0.114.0 cpe:/a:adobe:flash_player:9.0.112.0 cpe:/a:adobe:flash_player:9 cpe:/a:adobe:flash_player:8.0.42.0 cpe:/a:adobe:flash_player:8.0.39.0 cpe:/a:adobe:flash_player:8.0.35.0 cpe:/a:adobe:flash_player:8.0.34.0 cpe:/a:adobe:flash_player:8.0.33.0 cpe:/a:adobe:flash_player:8.0.24.0 cpe:/a:adobe:flash_player:8.0.22.0 cpe:/a:adobe:flash_player:8.0 cpe:/a:adobe:flash_player:8 cpe:/a:adobe:flash_player:7.2 cpe:/a:adobe:flash_player:7.1.1 cpe:/a:adobe:flash_player:7.1 cpe:/a:adobe:flash_player:7.0.70.0 cpe:/a:adobe:flash_player:7.0.69.0 cpe:/a:adobe:flash_player:7.0.63 cpe:/a:adobe:flash_player:7.0.25 cpe:/a:adobe:flash_player:7.0.1 cpe:/a:adobe:flash_player:7.0 cpe:/a:adobe:flash_player:7	51

Open Source Vulnerability Database (OSVDB)

id	Description
68024	Adobe Flash Player Unspecified Code Execution

Internal Sources (Detail)

Source	Url
APPLE	http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
CERT	http://www.us-cert.gov/cas/techalerts/TA10-263A.html http://www.us-cert.gov/cas/techalerts/TA10-279A.html
CERT-VN	http://www.kb.cert.org/vuls/id/275289
CONFIRM	http://support.apple.com/kb/HT4435 http://www.adobe.com/support/security/advisories/apsa10-03.html http://www.adobe.com/support/security/bulletins/apsb10-21.html http://www.adobe.com/support/security/bulletins/apsb10-22.html
GENTOO	http://security.gentoo.org/glsa/glsa-201101-08.xml http://security.gentoo.org/glsa/glsa-201101-09.xml
REDHAT	http://www.redhat.com/support/errata/RHSA-2010-0706.html http://www.redhat.com/support/errata/RHSA-2010-0743.html
SECUNIA	http://secunia.com/advisories/41434 http://secunia.com/advisories/41435 http://secunia.com/advisories/41443 http://secunia.com/advisories/41526 http://secunia.com/advisories/43025 http://secunia.com/advisories/43026
SUSE	http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
VUPEN	http://www.vupen.com/english/advisories/2010/2348 http://www.vupen.com/english/advisories/2010/2349 http://www.vupen.com/english/advisories/2011/0191 http://www.vupen.com/english/advisories/2011/0192
XF	http://xforce.iss.net/xforce/xfdb/61771

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-10 23:29:51	Multiple Updates

Type	Count
Oval ID(s)	1
CPE ID(s)	163
osvdb(s)	1

Related	Severity
VU#275289	(Critical)
TA10-279A	(Critical)
TA10-263A	(Critical)
RHSA-2010:0743	(Critical)
RHSA-2010:0706	(Critical)
GLSA-201101-09	(Critical)
GLSA-201101-08	(Critical)