CVE-2010-2170

Integer overflow in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-2181 and CVE-2010-2183.

Published: 2010-06-15 Last update: 2026-04-29 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2010-2170 is rated High Risk (65.1/100): CVSS Critical severity, with medium exploitation likelihood (EPSS 1.64%). Mandatory action: High exploitation likelihood—assess exposure and prioritize remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2010-2170

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2025-09-08 2.21% 1.64% -0.57%
2 2025-06-10 2.00% 2.21% +0.22%
3 2025-03-30 2.00%

Full EPSS history (11 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2010-2170

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
9.3 2.0 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:C)
Complete integrity impact.
Availability impact (A:C)
Complete availability impact.
8.6 10.0 [email protected]

Weakness enumeration for CVE-2010-2170

OS Trackers for CVE-2010-2170

vendor priority summary link
gentoo normal CVE-2010-2170: 1 GLSA(s) (201101-09), 1 atom(s) (www-plugins/adobe-flash); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2010-2170
redhat critical https://access.redhat.com/security/cve/CVE-2010-2170
ubuntu medium CVE-2010-2170 medium priority: Ubuntu including 2 source packages (adobe-flashplugin, flashplugin-nonfree), 12 status rows across 6 suites (dapper, hardy, jaunty, karmic, lucid, upstream): released 10, DNE 1, ignored 1. https://ubuntu.com/security/CVE-2010-2170

NVD evaluator notes for CVE-2010-2170

Impact: Per: http://www.adobe.com/support/security/bulletins/apsb10-14.html 'Affected software versions Adobe Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris Adobe AIR 1.5.3.9130 and earlier versions for Windows, Macintosh and Linux'

Affected software / configurations for CVE-2010-2170

Vendor Product Version Raw CPE
adobe flash_player 9.0.16 cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*
adobe flash_player 9.0.20 cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*
adobe flash_player 9.0.20.0 cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*
adobe flash_player 9.0.28 cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*
adobe flash_player 9.0.28.0 cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*
adobe flash_player 9.0.31 cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*
adobe flash_player 9.0.31.0 cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*
adobe flash_player 9.0.45.0 cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*
adobe flash_player 9.0.47.0 cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*
adobe flash_player 9.0.48.0 cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*
adobe flash_player 9.0.115.0 cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*
adobe flash_player 9.0.124.0 cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*
adobe flash_player 9.0.125.0 cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*
adobe flash_player 9.0.151.0 cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*
adobe flash_player 9.0.152.0 cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*
adobe flash_player 9.0.159.0 cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*
adobe flash_player 9.0.246.0 cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*
adobe flash_player 9.0.260.0 cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*
adobe flash_player 9.0.262.0 cpe:2.3:a:adobe:flash_player:9.0.262.0:*:*:*:*:*:*:*
adobe flash_player <= 10.0.45.2 cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
adobe flash_player 10.0.0.584 cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*
adobe flash_player 10.0.12.10 cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*
adobe flash_player 10.0.12.36 cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*
adobe flash_player 10.0.15.3 cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*
adobe flash_player 10.0.22.87 cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*
adobe flash_player 10.0.32.18 cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*
adobe flash_player 10.0.42.34 cpe:2.3:a:adobe:flash_player:10.0.42.34:*:*:*:*:*:*:*
adobe flash_player 6.0.79 cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*
adobe flash_player 7.0 cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*
adobe flash_player 7.0.1 cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*
adobe flash_player 7.0.14.0 cpe:2.3:a:adobe:flash_player:7.0.14.0:*:*:*:*:*:*:*
adobe flash_player 7.0.19.0 cpe:2.3:a:adobe:flash_player:7.0.19.0:*:*:*:*:*:*:*
adobe flash_player 7.0.24.0 cpe:2.3:a:adobe:flash_player:7.0.24.0:*:*:*:*:*:*:*
adobe flash_player 7.0.25 cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*
adobe flash_player 7.0.53.0 cpe:2.3:a:adobe:flash_player:7.0.53.0:*:*:*:*:*:*:*
adobe flash_player 7.0.60.0 cpe:2.3:a:adobe:flash_player:7.0.60.0:*:*:*:*:*:*:*
adobe flash_player 7.0.61.0 cpe:2.3:a:adobe:flash_player:7.0.61.0:*:*:*:*:*:*:*
adobe flash_player 7.0.63 cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*
adobe flash_player 7.0.66.0 cpe:2.3:a:adobe:flash_player:7.0.66.0:*:*:*:*:*:*:*
adobe flash_player 7.0.67.0 cpe:2.3:a:adobe:flash_player:7.0.67.0:*:*:*:*:*:*:*
adobe flash_player 7.0.68.0 cpe:2.3:a:adobe:flash_player:7.0.68.0:*:*:*:*:*:*:*
adobe flash_player 7.0.69.0 cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*
adobe flash_player 7.0.70.0 cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*
adobe flash_player 7.0.73.0 cpe:2.3:a:adobe:flash_player:7.0.73.0:*:*:*:*:*:*:*
adobe flash_player 7.1 cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*
adobe flash_player 7.1.1 cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*
adobe flash_player 7.2 cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*
adobe flash_player 8.0 cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*
adobe flash_player 8.0.22.0 cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*
adobe flash_player 8.0.24.0 cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*
adobe flash_player 8.0.33.0 cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*
adobe flash_player 8.0.34.0 cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*
adobe flash_player 8.0.35.0 cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*
adobe flash_player 8.0.39.0 cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*
adobe flash_player 8.0.42.0 cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*
macromedia flash_player 5.0 cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:*
macromedia flash_player 5.0.30.0 cpe:2.3:a:macromedia:flash_player:5.0.30.0:*:*:*:*:*:*:*
macromedia flash_player 5.0.41.0 cpe:2.3:a:macromedia:flash_player:5.0.41.0:*:*:*:*:*:*:*
macromedia flash_player 5.0.42.0 cpe:2.3:a:macromedia:flash_player:5.0.42.0:*:*:*:*:*:*:*
macromedia flash_player 5.0.58.0 cpe:2.3:a:macromedia:flash_player:5.0.58.0:*:*:*:*:*:*:*
adobe air <= 1.5.3.9130 cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
adobe air 1.0 cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*
adobe air 1.1 cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*
adobe air 1.5 cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*
adobe air 1.5.1 cpe:2.3:a:adobe:air:1.5.1:*:*:*:*:*:*:*
adobe air 1.5.2 cpe:2.3:a:adobe:air:1.5.2:*:*:*:*:*:*:*
adobe air 1.5.3 cpe:2.3:a:adobe:air:1.5.3:*:*:*:*:*:*:*

References for CVE-2010-2170

URL Tags
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
http://secunia.com/advisories/40144
http://secunia.com/advisories/40545
http://secunia.com/advisories/43026
http://security.gentoo.org/glsa/glsa-201101-09.xml
http://securitytracker.com/id?1024085
http://securitytracker.com/id?1024086
http://support.apple.com/kb/HT4435
http://www.adobe.com/support/security/bulletins/apsb10-14.html Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2010-0464.html
http://www.redhat.com/support/errata/RHSA-2010-0470.html
http://www.securityfocus.com/bid/40759
http://www.securityfocus.com/bid/40789
http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt
http://www.us-cert.gov/cas/techalerts/TA10-162A.html US Government Resource
http://www.vupen.com/english/advisories/2010/1421
http://www.vupen.com/english/advisories/2010/1432
http://www.vupen.com/english/advisories/2010/1434
http://www.vupen.com/english/advisories/2010/1453
http://www.vupen.com/english/advisories/2010/1482
http://www.vupen.com/english/advisories/2010/1522
http://www.vupen.com/english/advisories/2010/1793
http://www.vupen.com/english/advisories/2011/0192
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16348
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6766
cvelogic Threat Intelligence