Home > Vulnerability Database > CVE-2010-2167

Mend.io Vulnerability Database

CVE-2010-2167

Date: June 15, 2010

Multiple heap-based buffer overflows in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to malformed (1) GIF or (2) JPEG data.

Severity Score

5.6

Related Resources (32)

Url: http://www.vupen.com/english/advisories/2010/1421

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15437

Url: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html

Url: http://www.redhat.com/support/errata/RHSA-2010-0470.html

Url: http://www.vupen.com/english/advisories/2010/1482

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7491

Url: http://securitytracker.com/id?1024086

Url: http://securitytracker.com/id?1024085

Url: http://www.securityfocus.com/archive/1/511847/100/0/threaded

Url: http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt

Url: http://www.vupen.com/english/advisories/2010/1522

Url: http://www.securityfocus.com/bid/40802

Url: http://www.securityfocus.com/bid/40759

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2010-2167

Url: http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751

Url: http://www.redhat.com/support/errata/RHSA-2010-0464.html

Url: http://security.gentoo.org/glsa/glsa-201101-09.xml

Url: http://secunia.com/advisories/43026

Url: http://www.vupen.com/english/advisories/2010/1432

Url: http://www.vupen.com/english/advisories/2010/1793

Url: http://www.vupen.com/english/advisories/2010/1453

Url: http://www.vupen.com/english/advisories/2011/0192

Url: http://www.adobe.com/support/security/bulletins/apsb10-14.html

Url: http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html

Url: http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Url: http://www.us-cert.gov/cas/techalerts/TA10-162A.html

Url: http://www.vupen.com/english/advisories/2010/1434

Url: http://support.apple.com/kb/HT4435

Url: http://secunia.com/advisories/40545

Url: https://nvd.nist.gov/vuln/detail/CVE-2010-2167

Url: http://secunia.com/advisories/40144

Url: https://www.mend.io/vulnerability-database/CVE-2010-2167

Severity Score

5.6

Weakness Type (CWE)

Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-119

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	9.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2010-2167

Date: June 15, 2010

Severity Score

Related Resources (32)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?