Description
Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in September 2010.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | acroread +1 | 9.4.0-1.el5 | RHSA-2010:0743 |
| RHEL 5 | flash-plugin | 10.1.85.3-1.el5 | RHSA-2010:0706 |
| RHEL 4 | acroread +1 | 9.4.0-1.el4 | RHSA-2010:0743 |
| RHEL 4 | flash-plugin | 9.0.283.0-1.el4 | RHSA-2010:0706 |
| RHEL 3 | flash-plugin | 9.0.283.0-1.el3.with.oss | RHSA-2010:0706 |
Advisories 2
- RHSA-2010:0706 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2010:0743 Red Hat Security Advisory: acroread security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- TA10-263A third-party-advisory
- ADV-2011-0192 vdb-entry
- http://support.apple.com/kb/HT4435
- SUSE-SA:2010:048 vendor-advisory
- ADV-2011-0191 vdb-entry
- 43025 third-party-advisory
- 43026 third-party-advisory
- GLSA-201101-09 vendor-advisory
- oval:org.mitre.oval:def:6852 vdb-entry signature
- http://www.adobe.com/support/security/advisories/apsa10-03.html
- APPLE-SA-2010-11-10-1 vendor-advisory
- GLSA-201101-08 vendor-advisory
- 41526 third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb10-22.html
- RHSA-2010:0743 vendor-advisory
- http://www.adobe.com/support/security/bulletins/apsb10-21.html
- TA10-279A third-party-advisory
- 41443 third-party-advisory
- 41434 third-party-advisory
- adobe-flash-content-code-execution(61771) vdb-entry
- VU#275289 third-party-advisory
- ADV-2010-2348 vdb-entry
- ADV-2010-2349 vdb-entry
- RHSA-2010:0706 vendor-advisory
- SUSE-SR:2010:019 vendor-advisory
- 41435 third-party-advisory