CERTA-2010-AVI-447
Vulnerability from certfr_avis
Une vulnérabilité dans Adobe Flash Player permet l'exécution de code arbitraire à distance.
Description
Une vulnérabilité, non détaillée par l'éditeur et ayant fait l'objet de l'alerte CERTA-2010-ALE-015, a été découverte dans Adobe Flash Player. L'exploitation de celle-ci permet l'exécution de code arbitraire à distance.
Solution
Les versions 10.1.85.3 (Windows, Macintosh, GNU/Linux et Solaris) et 10.1.92.10 (Android) démphAdobe Flash Player corrigent cette vulnérabilité. Les correctifs pour Adobe Reader et Adobe Acrobat sont prévus ultérieurement. Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
NoneImpacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Adobe | N/A | Adobe Flash Player version 10.1.92.10 pour Android ; | ||
| Adobe | N/A | Adobe Reader versions 9.3.4 et antérieures pour Windows, Macintosh et UNIX ; | ||
| Adobe | Acrobat | Adobe Acrobat versions 9.3.4 et antérieures pour Windows et Macintosh. | ||
| Adobe | N/A | Adobe Flash Player versions 10.1.82.76 et antérieures pour Windows, Macintosh, GNU/Linux et Solaris ; |
References
| Title | Publication Time | Tags | ||||||
|---|---|---|---|---|---|---|---|---|
|
||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Adobe Flash Player version 10.1.92.10 pour Android ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Reader versions 9.3.4 et ant\u00e9rieures pour Windows, Macintosh et UNIX ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Acrobat versions 9.3.4 et ant\u00e9rieures pour Windows et Macintosh.",
"product": {
"name": "Acrobat",
"vendor": {
"name": "Adobe",
"scada": false
}
}
},
{
"description": "Adobe Flash Player versions 10.1.82.76 et ant\u00e9rieures pour Windows, Macintosh, GNU/Linux et Solaris ;",
"product": {
"name": "N/A",
"vendor": {
"name": "Adobe",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nUne vuln\u00e9rabilit\u00e9, non d\u00e9taill\u00e9e par l\u0027\u00e9diteur et ayant fait l\u0027objet de\nl\u0027alerte CERTA-2010-ALE-015, a \u00e9t\u00e9 d\u00e9couverte dans Adobe Flash Player.\nL\u0027exploitation de celle-ci permet l\u0027ex\u00e9cution de code arbitraire \u00e0\ndistance.\n\n## Solution\n\nLes versions 10.1.85.3 (Windows, Macintosh, GNU/Linux et Solaris) et\n10.1.92.10 (Android) d\u00e9mphAdobe Flash Player corrigent cette\nvuln\u00e9rabilit\u00e9. Les correctifs pour Adobe Reader et Adobe Acrobat sont\npr\u00e9vus ult\u00e9rieurement. Se r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur\npour l\u0027obtention des correctifs (cf. section Documentation).\n",
"cves": [
{
"name": "CVE-2010-2884",
"url": "https://www.cve.org/CVERecord?id=CVE-2010-2884"
}
],
"initial_release_date": "2010-09-21T00:00:00",
"last_revision_date": "2010-09-21T00:00:00",
"links": [
{
"title": "Alerte CERTA-2010-ALE-015 :",
"url": "http://www.certa.ssi.gouv.fr/site/CERTA-2010-ALE-015/"
}
],
"reference": "CERTA-2010-AVI-447",
"revisions": [
{
"description": "version initiale.",
"revision_date": "2010-09-21T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
}
],
"summary": "Une vuln\u00e9rabilit\u00e9 dans \u003cspan class=\"textit\"\u003eAdobe Flash Player\u003c/span\u003e\npermet l\u0027ex\u00e9cution de code arbitraire \u00e0 distance.\n",
"title": "Vuln\u00e9rabilit\u00e9 dans Adobe Flash Player",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletin de s\u00e9curit\u00e9 Adobe APSB10-22 du 20 septembre 2010",
"url": "http://www.adobe.com/support/security/bulletins/apsb10-22.html"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…