CVE-2010-1297
- State
- Published
- Severity
- 7.8 High
- Published
- Jun 8, 2010
- Updated
- Oct 22, 2025
- Reserved
- Apr 6, 2010
Description
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and Adobe Reader and Acrobat 9.x before 9.3.3, and 8.x before 8.2.3 on Windows and Mac OS X, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted SWF content, related to authplay.dll and the ActionScript Virtual Machine 2 (AVM2) newfunction instruction, as exploited in the wild in June 2010.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | CISA-ADP |
Weaknesses
- CWE-787 Out-of-bounds Write
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2010-1636vdb-entry
- http://community.websense.com/blogs/securitylabs/archive/2010/06/09/having-fun-with-adobe-0-day-exploits.aspx
- ADV-2010-1349vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb10-15.html
- ADV-2011-0192vdb-entry
- ADV-2010-1421vdb-entry
- http://support.apple.com/kb/HT4435
- 40545third-party-advisory
- http://blog.zynamics.com/2010/06/09/analyzing-the-currently-exploited-0-day-for-adobe-reader-and-adobe-flash/
- RHSA-2010:0464vendor-advisory
- ADV-2010-1793vdb-entry
- 43026third-party-advisory
- ADV-2010-1432vdb-entry
- GLSA-201101-09vendor-advisory
- TA10-162Athird-party-advisory
- http://www.adobe.com/support/security/advisories/apsa10-01.html
- VU#486225third-party-advisory
- APPLE-SA-2010-11-10-1vendor-advisory
- 40759vdb-entry
- 1024085vdb-entry
- SUSE-SR:2010:013vendor-advisory
- 1024057vdb-entry
- 1024086vdb-entry
- 40034third-party-advisory
- ADV-2010-1434vdb-entry
- 40586vdb-entry
- TLSA-2010-19vendor-advisory
- SSRT100179vendor-advisory
- SUSE-SA:2010:024vendor-advisory
- 1024058vdb-entry
- ADV-2010-1348vdb-entry
- 13787exploit
- http://www.adobe.com/support/security/bulletins/apsb10-14.html
- TA10-159Athird-party-advisory
- 40144third-party-advisory
- RHSA-2010:0470vendor-advisory
- ADV-2010-1482vdb-entry
- 40026third-party-advisory
- adobe-authplay-code-execution(59137)vdb-entry
- ADV-2010-1522vdb-entry
- oval:org.mitre.oval:def:7116vdb-entrysignature
- 65141vdb-entry
- ADV-2010-1453vdb-entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-1297government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.