Description
An unspecified ActiveX control in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 (Flash10h.ocx) on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted FLV video.
References
- http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_adobe_flash1
- SUSE-SA:2010:055 vendor-advisory
- 42926 third-party-advisory
- SSRT100428 vendor-advisory
- ADV-2010-2903 vdb-entry
- ADV-2011-0173 vdb-entry
- 44690 vdb-entry
- 20101105 [FG-VD-10-020]Adobe Flash Player Remote Memory corruption Vulnerability mailing-list
- http://www.adobe.com/support/security/bulletins/apsb10-26.html
- oval:org.mitre.oval:def:12259 vdb-entry signature