CVE-2010-3654

Publication date 29 October 2010

Last updated 24 July 2024


Ubuntu priority

Description

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted SWF content, as exploited in the wild in October 2010.

Read the notes from the security team

Status

Package Ubuntu Release Status
adobe-flashplugin 10.10 maverick
Not affected
10.04 LTS lucid
Not affected
9.10 karmic
Not affected
8.04 LTS hardy
Not affected
6.06 LTS dapper Not in release
flashplugin-nonfree 10.10 maverick
Not affected
10.04 LTS lucid
Not affected
9.10 karmic
Not affected
8.04 LTS hardy
Not affected
6.06 LTS dapper Ignored end of life

Notes


jdstrand

10.1.85.3 and ealier are affected. Fix expected around November 15


Access our resources on patching vulnerabilities