OSVDB ID: 69135

Title: Adobe Flash ActiveX Unspecified Memory Corruption (2010-3637)

Info

Disclosure
Nov 04, 2010

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Nov 04, 2010

Description

 Adobe Flash contains a flaw related to the 'Flash10h.ocx' ActiveX control that may result in memory corruption, allowing an attacker to execute arbitrary code. No further details have been provided.

Classification

 Location: Location Unknown
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: Vendor Verified

Solution

 Upgrade Adobe Flash to version 10.1.102.64 or higher and Adobe AIR to version 2.5.1 or higher, as they have been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Adobe Systems Incorporated

Flash Player

 10.1.85.3

Flash Player for Android

 10.1.95.1

AIR

 2.0.4

Flash Professional

 Flex
CS4
CS5

Flash

 Flex
CS3

References

Credit

Unknown or Incomplete


Direct URL: http://osvdb.org/69135