FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2010-1297

This CVE name corresponds to:

Entered Topic
2010-06-14 linux-flashplugin -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2010-1297
Phase Assigned(20100406)

Description

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.

References

Source Reference
EXPLOIT-DB 13787
MISC http://blog.zynamics.com/2010/06/09/analyzing-the-currently-exploited-0-day-for-adobe-reader-and-adobe-flash/
MISC http://community.websense.com/blogs/securitylabs/archive/2010/06/09/having-fun-with-adobe-0-day-exploits.aspx
CONFIRM http://www.adobe.com/support/security/advisories/apsa10-01.html
CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-14.html
CONFIRM http://www.adobe.com/support/security/bulletins/apsb10-15.html
CONFIRM http://support.apple.com/kb/HT4435
APPLE APPLE-SA-2010-11-10-1
GENTOO GLSA-201101-09
HP HPSBMA02547
HP SSRT100179
REDHAT RHSA-2010:0464
REDHAT RHSA-2010:0470
SUSE SUSE-SA:2010:024
SUSE SUSE-SR:2010:013
TURBO TLSA-2010-19
CERT TA10-162A
CERT TA10-159A
CERT-VN VU#486225
BID 40586
BID 40759
OSVDB 65141
OVAL oval:org.mitre.oval:def:7116
SECTRACK 1024057
SECTRACK 1024058
SECTRACK 1024085
SECTRACK 1024086
SECUNIA 40026
SECUNIA 40034
SECUNIA 40144
SECUNIA 40545
SECUNIA 43026
VUPEN ADV-2010-1348
VUPEN ADV-2010-1349
VUPEN ADV-2010-1453
VUPEN ADV-2010-1421
VUPEN ADV-2010-1432
VUPEN ADV-2010-1434
VUPEN ADV-2010-1482
VUPEN ADV-2010-1522
VUPEN ADV-2010-1793
VUPEN ADV-2011-0192
VUPEN ADV-2010-1636
XF adobe-authplay-code-execution(59137)