Description
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via an invalid offset in an unspecified undocumented opcode in ActionScript Virtual Machine 2, related to getouterscope, a different vulnerability than CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, CVE-2010-2187, and CVE-2010-2188.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 10.1-2.el5 | RHSA-2010:0464 |
| RHEL 4 | flash-plugin | 9.0.277.0-1.el4 | RHSA-2010:0470 |
| RHEL 3 | flash-plugin | 9.0.277.0-1.el3.with.oss | RHSA-2010:0470 |
Advisories 2
- RHSA-2010:0464 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0470 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- ADV-2011-0192 vdb-entry
- ADV-2010-1421 vdb-entry
- http://support.apple.com/kb/HT4435
- 40545 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-114
- oval:org.mitre.oval:def:7508 vdb-entry signature
- RHSA-2010:0464 vendor-advisory
- ADV-2010-1793 vdb-entry
- 43026 third-party-advisory
- ADV-2010-1432 vdb-entry
- GLSA-201101-09 vendor-advisory
- TA10-162A third-party-advisory
- APPLE-SA-2010-11-10-1 vendor-advisory
- 40759 vdb-entry
- 1024085 vdb-entry
- SUSE-SR:2010:013 vendor-advisory
- 1024086 vdb-entry
- ADV-2010-1434 vdb-entry
- 20100625 ZDI-10-114: Adobe Flash Player AVM2 getouterscope Opcode Remote Code Execution Vulnerability mailing-list
- TLSA-2010-19 vendor-advisory
- SSRT100179 vendor-advisory
- SUSE-SA:2010:024 vendor-advisory
- 40779 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb10-14.html
- 40144 third-party-advisory
- RHSA-2010:0470 vendor-advisory
- ADV-2010-1482 vdb-entry
- oval:org.mitre.oval:def:16083 vdb-entry signature
- ADV-2010-1522 vdb-entry
- ADV-2010-1453 vdb-entry