CVE-2010-2174 json
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrar…
published 2010-06-15 16 y ago modified 2026-06-16 4 mo ago also EUVD-2010-2190
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 7.4%
- EPSS 7.4% chance of exploitation in 30 days, percentile 94%
- public exploits
- 0
- none known
Summary
Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, related to an "invalid pointer vulnerability" and the newfunction (0x44) operator, a different vulnerability than CVE-2010-2173.
Patch / fix
- flash-plugin RHEL 3 EXTRAS 9.0.277.0-1.el3.with.oss
- flash-plugin RHEL 4 EXTRAS 9.0.277.0-1.el4
- flash-plugin RHEL 5 EXTRAS 10.1-2.el5
red hat advisories RHSA-2010:0470RHSA-2010:0464
Vendor advisories
What the vendors themselves say about their products: affected, fixed or not affected, and what to do.
red hat product security vex CVE-2010-2174 updated cvss 6.8
flash-plugin: multiple security flaws (APSB10-14)
-
Red Hat Desktop version 3 Extras flash-plugin 9.0.277.0-1.el3.with.oss Red Hat Desktop version 4 Extras flash-plugin 9.0.277.0-1.el4 Red Hat Enterprise Linux AS version 3 Extras flash-plugin 9.0.277.0-1.el3.with.oss Red Hat Enterprise Linux AS version 4 Extras flash-plugin 9.0.277.0-1.el4fixed: vendor fix RHSA-2010:0470
-
Red Hat Enterprise Linux Desktop Supplementary (v. 5) flash-plugin 10.1-2.el5fixed: vendor fix RHSA-2010:0464
-
Red Hat Enterprise Linux ES version 3 Extras flash-plugin 9.0.277.0-1.el3.with.oss Red Hat Enterprise Linux ES version 4 Extras flash-plugin 9.0.277.0-1.el4fixed: vendor fix RHSA-2010:0470
-
Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin 10.1-2.el5fixed: vendor fix RHSA-2010:0464
-
Red Hat Enterprise Linux WS version 3 Extras flash-plugin 9.0.277.0-1.el3.with.oss Red Hat Enterprise Linux WS version 4 Extras flash-plugin 9.0.277.0-1.el4fixed: vendor fix RHSA-2010:0470
Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf
Exploit prediction
7.44% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
-
adobe.com
/support/security/bulletins/apsb10-14.html
patch, vendor-advisory
-
redhat.com
/support/errata/RHSA-2010-0464.html
vendor-advisory
-
security.gentoo.org
/glsa/glsa-201101-09.xml
vendor-advisory
-
lists.apple.com
/archives/security-announce/2010//Nov/msg00000.html
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2010-06/msg00001.html
vendor-advisory
-
turbolinux.co.jp
/security/2010/TLSA-2010-19j.txt
vendor-advisory
-
itrc.hp.com
/service/cki/docDisplay.do?docId=emr_na-c02273751
vendor-advisory
-
lists.opensuse.org
/opensuse-security-announce/2010-06/msg00000.html
vendor-advisory
-
redhat.com
/support/errata/RHSA-2010-0470.html
vendor-advisory
-
vupen.com
/english/advisories/2011/0192
vdb-entry
-
vupen.com
/english/advisories/2010/1421
vdb-entry
- support.apple.com /kb/HT4435
-
secunia.com
/advisories/40545
third-party-advisory
-
vupen.com
/english/advisories/2010/1793
vdb-entry
-
secunia.com
/advisories/43026
third-party-advisory
-
vupen.com
/english/advisories/2010/1432
vdb-entry
-
us-cert.gov
/cas/techalerts/TA10-162A.html
third-party-advisory, us-government-resource
-
securityfocus.com
/bid/40759
vdb-entry
-
securitytracker.com
/id?1024085
vdb-entry
-
securitytracker.com
/id?1024086
vdb-entry
-
vupen.com
/english/advisories/2010/1434
vdb-entry
-
securityfocus.com
/bid/40805
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/59323
vdb-entry
-
securityfocus.com
/archive/1/511849/100/0/threaded
mailing-list
-
secunia.com
/advisories/40144
third-party-advisory
-
vupen.com
/english/advisories/2010/1482
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7528
vdb-entry, signature
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15360
vdb-entry, signature
-
vupen.com
/english/advisories/2010/1522
vdb-entry
-
vupen.com
/english/advisories/2010/1453
vdb-entry
Sources
- CVE List CVE-2010-2174
- NVD CVE-2010-2174
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.