Description
Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "click-jacking" issue.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | acroread +1 | 9.3.4-1.el5 | RHSA-2010:0636 |
| RHEL 5 | flash-plugin | 10.1.82.76-1.el5 | RHSA-2010:0623 |
| RHEL 4 | acroread +1 | 9.3.4-1.el4 | RHSA-2010:0636 |
| RHEL 4 | flash-plugin | 9.0.280.0-1.el4 | RHSA-2010:0624 |
| RHEL 3 | flash-plugin | 9.0.280.0-1.el3.with.oss | RHSA-2010:0624 |
Advisories 3
- RHSA-2010:0636 Red Hat Security Advisory: acroread security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0624 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0623 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- ADV-2011-0192 vdb-entry
- http://support.apple.com/kb/HT4435
- HPSBMA02592 vendor-advisory
- 1024621 vdb-entry
- 43026 third-party-advisory
- oval:org.mitre.oval:def:11532 vdb-entry signature
- GLSA-201101-09 vendor-advisory
- APPLE-SA-2010-11-10-1 vendor-advisory
- oval:org.mitre.oval:def:16192 vdb-entry signature
- http://www.adobe.com/support/security/bulletins/apsb10-16.html
- 42361 vdb-entry