CVE-2010-0378 - Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."

Back Back to CVE browser

HIGH

Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."

Published Jan 21, 2010

8.8

HIGH

CVSS 3.1

EPSS 6.18%

Description

Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-416

Use After Free

References (7)

http://secunia.com/advisories/27105
third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
http://secunia.com/secunia_research/2007-77/
x_refsource_MISCBroken LinkVendor Advisory
http://securitytracker.com/id?1023435
vdb-entryx_refsource_SECTRACKBroken LinkThird Party AdvisoryVDB Entry
http://www.kb.cert.org/vuls/id/204889
third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
http://www.microsoft.com/technet/security/advisory/979267.mspx
x_refsource_CONFIRMBroken LinkPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0409
Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7580
vdb-entrysignaturex_refsource_OVALBroken Link

Link	Providers	Tags
http://secunia.com/advisories/27105		third-party-advisoryx_refsource_SECUNIABroken LinkVendor Advisory
http://secunia.com/secunia_research/2007-77/		x_refsource_MISCBroken LinkVendor Advisory
http://securitytracker.com/id?1023435		vdb-entryx_refsource_SECTRACKBroken LinkThird Party AdvisoryVDB Entry
http://www.kb.cert.org/vuls/id/204889		third-party-advisoryx_refsource_CERT-VNThird Party AdvisoryUS Government Resource
http://www.microsoft.com/technet/security/advisory/979267.mspx		x_refsource_CONFIRMBroken LinkPatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0409		Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7580		vdb-entrysignaturex_refsource_OVALBroken Link