Description
Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 10.0.42.34-1.el5 | RHSA-2009:1657 |
| RHEL 4 | flash-plugin | 9.0.260.0-1.el4 | RHSA-2009:1658 |
| RHEL 3 | flash-plugin | 9.0.260.0-1.el3.with.oss | RHSA-2009:1658 |
Advisories 2
- RHSA-2009:1658 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:1657 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2009:1657 vendor-advisory
- 1023307 vdb-entry
- oval:org.mitre.oval:def:6899 vdb-entry signature
- flash-air-unspecified-code-execution(54634) vdb-entry
- http://support.apple.com/kb/HT4004
- 1021716 vendor-advisory
- APPLE-SA-2010-01-19-1 vendor-advisory
- ADV-2009-3456 vdb-entry
- SUSE-SA:2009:062 vendor-advisory
- oval:org.mitre.oval:def:7902 vdb-entry signature
- https://bugzilla.redhat.com/show_bug.cgi?id=543857
- 37584 third-party-advisory
- 37902 third-party-advisory
- oval:org.mitre.oval:def:16340 vdb-entry signature
- http://www.adobe.com/support/security/bulletins/apsb09-19.html
- 1023306 vdb-entry
- RHSA-2009:1658 vendor-advisory
- TA09-343A third-party-advisory
- 38241 third-party-advisory
- 37199 vdb-entry
- ADV-2010-0173 vdb-entry