Description
Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors, related to a "data injection vulnerability."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 10.0.42.34-1.el5 | RHSA-2009:1657 |
| RHEL 4 | flash-plugin | 9.0.260.0-1.el4 | RHSA-2009:1658 |
| RHEL 3 | flash-plugin | 9.0.260.0-1.el3.with.oss | RHSA-2009:1658 |
Advisories 2
- RHSA-2009:1658 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:1657 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2009:1657 vendor-advisory
- 1023307 vdb-entry
- http://support.apple.com/kb/HT4004
- 1021716 vendor-advisory
- oval:org.mitre.oval:def:16216 vdb-entry signature
- APPLE-SA-2010-01-19-1 vendor-advisory
- ADV-2009-3456 vdb-entry
- SUSE-SA:2009:062 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=543857
- flash-air-data-code-execution(54632) vdb-entry
- oval:org.mitre.oval:def:7763 vdb-entry signature
- 37584 third-party-advisory
- 60886 vdb-entry
- 37902 third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb09-19.html
- 1023306 vdb-entry
- RHSA-2009:1658 vendor-advisory
- TA09-343A third-party-advisory
- 38241 third-party-advisory
- 37199 vdb-entry
- ADV-2010-0173 vdb-entry
- oval:org.mitre.oval:def:7460 vdb-entry signature