This application requires Javascript for optimal performance.

Adobe.Flash.Player.Unspecified.SR.Code.Execution

Release Date

Jun 16, 2010

Severity

high

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates an attack attempt against a code-execution vulnerability in Adobe Flash Player.

The vulnerability is caused by an error when the vulnerable software handles a malicious .swf file. It allows a remote attacker to execute arbitrary code via sending a crafted .swf file.

Affected Products

Adobe Flash Player version 10.0.45.2

Recommended Actions

Refer to the vendor's advisory for updates:
http://www.adobe.com/support/security/bulletins/apsb10-14.html

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2010-2174

Reference/s

http://www.adobe.com/support/security/bulletins/apsb10-14.html

Reference: VID-23401