CVE-2010-0378
HIGHAdobe Flash Player - Use After Free
Title source: ruleDescription
Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."
Scores
CVSS v3
8.8
EPSS
0.1377
EPSS Percentile
94.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-416
Status
draft
Affected Products (1)
adobe/flash_player
Timeline
Published
Jan 21, 2010
Tracked Since
Feb 18, 2026