This application requires Javascript for optimal performance.

Adobe.Flash.Player.LocalConnection.Memory.Corruption

Release Date

Jun 11, 2010

Severity

high

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt against a memory-corruption vulnerability in
Adobe Flash Player.

The vulnerability is caused by an error when the vulnerable software handles
a function call multiple times with malformed parameters. It could allow a remote attacker to execute arbitrary code via sending a crafted SWF file.

Affected Products

Adobe Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris

Recommended Actions

Upgrade to the latest version:
http://www.adobe.com/

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2010-2188

Reference/s

http://www.adobe.com/support/security/bulletins/apsb10-14.html

Reference: VID-23392