Description
Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 10.0.42.34-1.el5 | RHSA-2009:1657 |
Advisories 1
- RHSA-2009:1657 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2009:1657 vendor-advisory
- 1023307 vdb-entry
- http://support.apple.com/kb/HT4004
- 1021716 vendor-advisory
- APPLE-SA-2010-01-19-1 vendor-advisory
- ADV-2009-3456 vdb-entry
- SUSE-SA:2009:062 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=543857
- flash-air-corruption-code-execution(54633) vdb-entry
- 37584 third-party-advisory
- 37902 third-party-advisory
- oval:org.mitre.oval:def:7140 vdb-entry signature
- http://www.adobe.com/support/security/bulletins/apsb09-19.html
- 1023306 vdb-entry
- oval:org.mitre.oval:def:8350 vdb-entry signature
- TA09-343A third-party-advisory
- 38241 third-party-advisory
- 37199 vdb-entry
- oval:org.mitre.oval:def:15795 vdb-entry signature
- ADV-2010-0173 vdb-entry