CVE:CVE-2010-2175
CNNVD:CNNVD-201006-209
Flash Player是一款非常流行的FLASH播放器。
Adobe Flash Player和Adobe AIR存在缓冲区溢出漏洞。远程攻击者可以借助未明向量导致拒绝服务(内存占用)，也可能导致任意代码执行。
solution:Upgrade adobe flash_player to a higher version than 9.0.16,9.0.20,9.0.20.0,9.0.28,9.0.28.0,9.0.31,9.0.31.0,9.0.45.0,9.0.47.0,9.0.48.0,9.0.115.0,9.0.124.0,9.0.125.0,9.0.151.0,9.0.152.0,9.0.159.0,9.0.246.0,9.0.260.0,9.0.262.0,10.0.45.2,10.0.0.584,10.0.12.10,10.0.12.36,10.0.15.3,10.0.22.87,10.0.32.18,10.0.42.34,6.0.79,7.0,7.0.1,7.0.14.0,7.0.19.0,7.0.24.0,7.0.25,7.0.53.0,7.0.60.0,7.0.61.0,7.0.63,7.0.66.0,7.0.67.0,7.0.68.0,7.0.69.0,7.0.70.0,7.0.73.0,7.1,7.1.1,7.2,8.0,8.0.22.0,8.0.24.0,8.0.33.0,8.0.34.0,8.0.35.0,8.0.39.0,8.0.42.0,and avoid the version 9.0.16,9.0.20,9.0.20.0,9.0.28,9.0.28.0,9.0.31,9.0.31.0,9.0.45.0,9.0.47.0,9.0.48.0,9.0.115.0,9.0.124.0,9.0.125.0,9.0.151.0,9.0.152.0,9.0.159.0,9.0.246.0,9.0.260.0,9.0.262.0,(,10.0.45.2],10.0.0.584,10.0.12.10,10.0.12.36,10.0.15.3,10.0.22.87,10.0.32.18,10.0.42.34,6.0.79,7.0,7.0.1,7.0.14.0,7.0.19.0,7.0.24.0,7.0.25,7.0.53.0,7.0.60.0,7.0.61.0,7.0.63,7.0.66.0,7.0.67.0,7.0.68.0,7.0.69.0,7.0.70.0,7.0.73.0,7.1,7.1.1,7.2,8.0,8.0.22.0,8.0.24.0,8.0.33.0,8.0.34.0,8.0.35.0,8.0.39.0,8.0.42.0; Upgrade macromedia flash_player to a higher version than 5.0,5.0.30.0,5.0.41.0,5.0.42.0,5.0.58.0,and avoid the version 5.0,5.0.30.0,5.0.41.0,5.0.42.0,5.0.58.0; Upgrade adobe air to a higher version than 1.5.3.9130,1.0,1.1,1.5,1.5.1,1.5.2,1.5.3,and avoid the version (,1.5.3.9130],1.0,1.1,1.5,1.5.1,1.5.2,1.5.3