Oval Definition:oval:org.mitre.oval:def:11977
Revision Date:2015-08-03Version:49
Title:Adobe Flash Player and AIR Unspecified Memory Corruption Vulnerability
Description:Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-0209, CVE-2010-2213, and CVE-2010-2214.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2010-2216
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows 8.1
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Server 2012 R2
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Adobe AIR
Adobe Flash Player
Definition Synopsis
  • Vulnerable version of Adobe AIR
  • Adobe AIR is installed
  • AND Adobe AIR version is less than 2.0.3
  • OR Vulnerable version of Adobe Flash Player
  • Adobe Flash Player before 9.0.280.0 installed
  • Adobe Flash Player is installed
  • AND Adobe Flash Player version installed on the system is less than 9.0.280.0
  • OR Adobe Flash Player 10.x through 10.0.45.2 installed
  • Adobe Flash Player 10 is installed
  • AND Adobe Flash Player version installed on the system is less than 10.1.82.76
  • OR Flash.ocx section
  • ActiveX Control is installed
  • AND Flash.ocx versions section
  • Flash.ocx 10 section
  • Determine if the version of Flash.ocx is less than 10.1.82.76
  • AND Determine if the version of Flash.ocx is greater than or equal 10.0
  • OR Flash.ocx 9 section
  • Determine if the version of Flash.ocx is less than 9.0.280.0
  • AND Determine if the version of Flash.ocx is greater than or equal 9.0
  • BACK