CVE-2010-0378: Use After Free
First published: Thu Jan 21 2010(Updated: )
Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Macromedia Flash Player | =6.0.79 | |
| Microsoft Windows XP | =sp2 | |
| Microsoft Windows XP | =sp3 | |
| Microsoft Windows XP | =sp2 | |
| All of | ||
| =6.0.79 | ||
| Any of | ||
| =sp2 | ||
| =sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://securitytracker.com/id?1023435
- http://www.microsoft.com/technet/security/advisory/979267.mspx
- http://secunia.com/advisories/27105
- http://www.kb.cert.org/vuls/id/204889
- http://secunia.com/secunia_research/2007-77/
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7580
Frequently Asked Questions
What is the severity of CVE-2010-0378?
CVE-2010-0378 is considered critical due to the potential for remote code execution.
How do I fix CVE-2010-0378?
To fix CVE-2010-0378, update Adobe Flash Player to the latest version or disable Flash in your browser.
Which software is affected by CVE-2010-0378?
CVE-2010-0378 affects Adobe Flash Player version 6.0.79 running on Microsoft Windows XP SP2 and SP3.
What type of vulnerability is CVE-2010-0378?
CVE-2010-0378 is a use-after-free vulnerability that can lead to memory corruption.
Can CVE-2010-0378 be exploited remotely?
Yes, CVE-2010-0378 can be exploited remotely by attackers through malicious Flash content.
- collector/nvd-historical
- agent/references
- agent/type
- agent/weakness
- agent/severity
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/author
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- vendor/adobe
- canonical/macromedia flash player
- version/macromedia flash player/6.0.79
- vendor/microsoft
- canonical/microsoft windows xp
- version/microsoft windows xp/sp2
- version/microsoft windows xp/sp3