Vulnerabilities > CVE-2010-0378 - Use After Free vulnerability in Adobe Flash Player 6.0.79

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
adobe
CWE-416
NVD
Published: 2010-01-21
Updated: 2024-11-21

Summary

Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."

Vulnerable Configurations

Part Description Count
Application
Adobe
1
OS
Microsoft
2

Common Weakness Enumeration (CWE)

Oval

accepted2015-08-03T04:02:08.213-04:00
classvulnerability
contributors
  • namePreeti Subramanian
    organizationSecPod Technologies
  • nameShane Shaffer
    organizationG2, Inc.
  • nameMaria Kedovskaya
    organizationALTX-SOFT
  • nameMaria Kedovskaya
    organizationALTX-SOFT
  • nameMaria Mikhno
    organizationALTX-SOFT
  • nameMaria Mikhno
    organizationALTX-SOFT
definition_extensions
  • commentMicrosoft Windows XP (x86) SP2 is installed
    ovaloval:org.mitre.oval:def:754
  • commentMicrosoft Windows XP (x86) SP3 is installed
    ovaloval:org.mitre.oval:def:5631
  • commentMicrosoft Windows XP x64 Edition SP2 is installed
    ovaloval:org.mitre.oval:def:4193
  • commentAdobe Flash Player is installed
    ovaloval:org.mitre.oval:def:6700
  • commentActiveX Control is installed
    ovaloval:org.mitre.oval:def:26707
descriptionUse-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."
familywindows
idoval:org.mitre.oval:def:7580
statusaccepted
submitted2010-05-18T02:23:08
titleUse-after-free vulnerability in Adobe Flash Player 6.0.79
version69

References