Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code (CVE-2010-2883, CVE-2010-2884, CVE-2010-2887, CVE-2010-2889, CVE-2010-2890, CVE-2010-3619, CVE-2010-3620, CVE-2010-3621, CVE-2010-3622, CVE-2010-3623, CVE-2010-3624, CVE-2010-3625, CVE-2010-3626, CVE-2010-3627, CVE-2010-3628, CVE-2010-3629, CVE-2010-3630, CVE-2010-3631, CVE-2010-3632, CVE-2010-3656, CVE-2010-3657, CVE-2010-3658).

Flash Player was updated to version 10.1.85.3 to fix a critical security issue (CVE-2010-2884).

The remote host is affected by the vulnerability described in GLSA-201101-09 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities were discovered in Adobe Flash Player. For     further information please consult the CVE entries and the Adobe     Security Bulletins referenced below.
  Impact :

    A remote attacker could entice a user to open a specially crafted SWF     file, possibly resulting in the execution of arbitrary code with the     privileges of the user running the application, or a Denial of Service.
  Workaround :

    There is no known workaround at this time.

Adobe Product Security Incident Response Team reports :

A critical vulnerability exists in Adobe Flash Player 10.1.82.76 and earlier versions for Windows, Macintosh, Linux, Solaris, and Adobe Flash Player 10.1.92.10 for Android. This vulnerability also affects Adobe Reader 9.3.4 and earlier versions for Windows, Macintosh and UNIX, and Adobe Acrobat 9.3.4 and earlier versions for Windows and Macintosh. This vulnerability (CVE-2010-2884) could cause a crash and potentially allow an attacker to take control of the affected system.
There are reports that this vulnerability is being actively exploited in the wild against Adobe Flash Player on Windows. Adobe is not aware of any attacks exploiting this vulnerability against Adobe Reader or Acrobat to date.

The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.5.

Mac OS X 10.6.5 contains security fixes for the following products :

  - AFP Server
  - Apache mod_perl
  - Apache
  - AppKit
  - ATS
  - CFNetwork
  - CoreGraphics
  - CoreText
  - CUPS
  - Directory Services
  - diskdev_cmds
  - Disk Images
  - Flash Player plug-in
  - gzip
  - Image Capture
  - ImageIO
  - Image RAW
  - Kernel
  - MySQL
  - neon
  - Networking
  - OpenLDAP
  - OpenSSL
  - Password Server
  - PHP
  - Printing
  - python
  - QuickLook
  - QuickTime
  - Safari RSS
  - Time Machine
  - Wiki Server
  - X11
  - xar

The remote Windows host contains a version of Adobe Flash Player 9.x before 9.0.283 or 10.x earlier than 10.1.85.3.  Such versions are potentially affected by an unspecified code execution vulnerability. 

Note that there are reports this is being actively exploited in the wild.

Flash Player was updated to version 10.1.85.3 to fix a critical security issue. (CVE-2010-2884)

Specially crafted PDF documents could crash acroread or lead to execution of arbitrary code. (CVE-2010-2883 / CVE-2010-2884 / CVE-2010-2887 / CVE-2010-2889 / CVE-2010-2890 / CVE-2010-3619 / CVE-2010-3620 / CVE-2010-3621 / CVE-2010-3622 / CVE-2010-3623 / CVE-2010-3624 / CVE-2010-3625 / CVE-2010-3626 / CVE-2010-3627 / CVE-2010-3628 / CVE-2010-3629 / CVE-2010-3630 / CVE-2010-3631 / CVE-2010-3632 / CVE-2010-3656 / CVE-2010-3657 / CVE-2010-3658)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
49825	openSUSE Security Update : acroread (openSUSE-SU-2010:0706-1)	Nessus	SuSE Local Security Checks	2010/10/11	2022/6/8	high
75492	openSUSE Security Update : flash-player (openSUSE-SU-2010:0647-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	high
49824	openSUSE Security Update : acroread (openSUSE-SU-2010:0706-1)	Nessus	SuSE Local Security Checks	2010/10/11	2022/6/8	high
51658	GLSA-201101-09 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2011/1/24	2022/6/8	high
49652	FreeBSD : linux-flashplugin -- remote code execution (8a34d9e6-c662-11df-b2e1-001b2134ef46)	Nessus	FreeBSD Local Security Checks	2010/9/23	2021/1/6	high
50548	Mac OS X 10.6.x < 10.6.5 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	2010/11/10	2024/5/28	critical
49307	Flash Player < 9.0.283 / 10.1.85.3 Unspecified Code Execution (APSB10-22)	Nessus	Windows	2010/9/21	2022/4/11	high
49641	openSUSE Security Update : flash-player (openSUSE-SU-2010:0647-1)	Nessus	SuSE Local Security Checks	2010/9/22	2021/1/14	high
51738	SuSE 10 Security Update : flash-player (ZYPP Patch Number 7165)	Nessus	SuSE Local Security Checks	2011/1/27	2021/1/14	high
51703	SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 7181)	Nessus	SuSE Local Security Checks	2011/1/27	2022/6/8	high
75419	openSUSE Security Update : acroread (openSUSE-SU-2010:0706-1)	Nessus	SuSE Local Security Checks	2014/6/13	2022/6/8	high

检测

插件搜索

high

high

high

high

high

critical

high

high

high

high

high