Patchwire CVEs, their patch status, and feeds to follow them

CVE-2010-3654

Fixed in a distro release EPSS 70%

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.

Published 2010-10-29 · CVE record · OSV

Products: adobe flash_player, macromedia flash_player, adobe acrobat, adobe acrobat_reader

Distro releases

ReleasePackageFixed in
Red Hat rhel extras 4acroread0:9.4.1-1.el4
Red Hat rhel extras 4acroread-plugin0:9.4.1-1.el4
Red Hat rhel extras 4flash-plugin0:9.0.289.0-1.el4
Red Hat rhel extras 5acroread0:9.4.1-1.el5
Red Hat rhel extras 5acroread-plugin0:9.4.1-1.el5
Red Hat rhel extras 5flash-plugin0:10.1.102.64-1.el5
Red Hat rhel extras 6acroread0:9.4.1-1.el6
Red Hat rhel extras 6acroread-plugin0:9.4.1-1.el6
Red Hat rhel extras 6flash-plugin0:10.1.102.64-1.el6