CVE-2010-2164 json
Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might all…
published 2010-06-15 16 y ago modified 2026-06-16 4 mo ago also EUVD-2010-2180
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 7.4%
- EPSS 7.4% chance of exploitation in 30 days, percentile 94%
- public exploits
- 0
- none known
Summary
Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unspecified "image type within a certain function."
Patch / fix
- flash-plugin RHEL 3 EXTRAS 9.0.277.0-1.el3.with.oss
- flash-plugin RHEL 4 EXTRAS 9.0.277.0-1.el4
- flash-plugin RHEL 5 EXTRAS 10.1-2.el5
red hat advisories RHSA-2010:0470RHSA-2010:0464
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2010-2164 updated cvss 6.8
flash-plugin: multiple security flaws (APSB10-14)
-
Red Hat Desktop version 3 Extras flash-plugin 9.0.277.0-1.el3.with.oss Red Hat Desktop version 4 Extras flash-plugin 9.0.277.0-1.el4 Red Hat Enterprise Linux AS version 3 Extras flash-plugin 9.0.277.0-1.el3.with.oss Red Hat Enterprise Linux AS version 4 Extras flash-plugin 9.0.277.0-1.el4fixed: vendor fix RHSA-2010:0470
-
Red Hat Enterprise Linux Desktop Supplementary (v. 5) flash-plugin 10.1-2.el5fixed: vendor fix RHSA-2010:0464
-
Red Hat Enterprise Linux ES version 3 Extras flash-plugin 9.0.277.0-1.el3.with.oss Red Hat Enterprise Linux ES version 4 Extras flash-plugin 9.0.277.0-1.el4fixed: vendor fix RHSA-2010:0470
-
Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin 10.1-2.el5fixed: vendor fix RHSA-2010:0464
-
Red Hat Enterprise Linux WS version 3 Extras flash-plugin 9.0.277.0-1.el3.with.oss Red Hat Enterprise Linux WS version 4 Extras flash-plugin 9.0.277.0-1.el4fixed: vendor fix RHSA-2010:0470
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
7.44% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-399 Resource Management Errors
References
-
adobe.com
/support/security/bulletins/apsb10-14.html
patch, vendor-advisory
-
redhat.com
/support/errata/RHSA-2010-0464.html
vendor-advisory
-
security.gentoo.org
/glsa/glsa-201101-09.xml
vendor-advisory
-
lists.apple.com
/archives/security-announce/2010//Nov/msg00000.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2010-06/msg00001.html
vendor-advisory
-
turbolinux.co.jp
/security/2010/TLSA-2010-19j.txt
vendor-advisory
-
itrc.hp.com
/service/cki/docDisplay.do?docId=emr_na-c02273751
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2010-06/msg00000.html
vendor-advisory
-
redhat.com
/support/errata/RHSA-2010-0470.html
vendor-advisory
-
vupen.com
/english/advisories/2011/0192
vdb-entry, vendor-advisory
-
vupen.com
/english/advisories/2010/1421
vdb-entry, vendor-advisory
-
secunia.com
/advisories/40545
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2010/1793
vdb-entry, vendor-advisory
-
secunia.com
/advisories/43026
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2010/1432
vdb-entry, vendor-advisory
-
vupen.com
/english/advisories/2010/1434
vdb-entry, vendor-advisory
-
secunia.com
/advisories/40144
third-party-advisory, vendor-advisory
-
vupen.com
/english/advisories/2010/1482
vdb-entry, vendor-advisory
-
vupen.com
/english/advisories/2010/1522
vdb-entry, vendor-advisory
-
vupen.com
/english/advisories/2010/1453
vdb-entry, vendor-advisory
- support.apple.com /kb/HT4435
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15798
vdb-entry, signature
-
us-cert.gov
/cas/techalerts/TA10-162A.html
third-party-advisory, us-government-resource
-
labs.idefense.com
/intelligence/vulnerabilities/display.php?id=872
third-party-advisory
-
securityfocus.com
/bid/40759
vdb-entry
-
securitytracker.com
/id?1024085
vdb-entry
-
securitytracker.com
/id?1024086
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6765
vdb-entry, signature
-
securityfocus.com
/bid/40780
vdb-entry
Sources
- CVE List CVE-2010-2164
- NVD CVE-2010-2164
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.