CVE-2010-2188

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code by calling the ActionScript native object 2200 connect method multiple times with different arguments, a different vulnerability than CVE-2010-2160, CVE-2010-2165, CVE-2010-2166, CVE-2010-2171, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2180, CVE-2010-2182, CVE-2010-2184, and CVE-2010-2187.

公開: 2010-06-15 最後更新: 2026-06-16 指派方: [email protected] 來源: [email protected]

結論預警: CVE-2010-2188 綜合評估為高風險(74.8/100):CVSS 技術影響為嚴重級,利用機率偏高(EPSS 6.75%,百分位 93%) 核心證據: EPSS 顯示該漏洞近期被利用的可能性處於高位。 近一日 EPSS 上升 +5.43%,被利用關注度持續升高。 強制指令: 被利用機率偏高—請盤點暴露面並優先安排修補。

風險隨態勢動態變化;本站持續評估並同步更新本頁展示內容。

CVE-2010-2188 的 EPSS(利用預測評分)

EPSS 日更估計相對被利用可能性;百分位表示該 CVE 在已評分漏洞中的相對排名(越高表示相對更嚴重)。

# 日期 舊 EPSS 分數 新 EPSS 分數 變化(新 − 舊)
1 2026-06-15 1.32% 6.75% +5.43%
2 2026-03-06 1.21% 1.32% +0.11%
3 2025-09-08 1.21%

完整 EPSS 歷史 (共 13 筆)

CVE-2010-2188 的 CVSS 指標

該 CVE 的 CVSS 指標。

底座分 版本 嚴重度 向量 可利用性 影響 分數來源
9.3 2.0 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C 點擊展開
存取路徑 (AV:N)
只要路由可達,即可從遠端發動利用。
存取複雜度 (AC:M)
需要若干有利條件,但不必「千年一遇」。
認證 (AU:N)
全程無需有效身分。
機密性影響 (C:C)
機密性被完全破壞。
完整性影響 (I:C)
完整性被完全破壞。
可用性影響 (A:C)
可用性被完全破壞。
8.6 10.0 [email protected]

CVE-2010-2188 的弱點列舉

CVE-2010-2188 的 OS 追蹤

vendor priority summary link
gentoo normal CVE-2010-2188: 1 GLSA(s) (201101-09), 1 atom(s) (www-plugins/adobe-flash); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2010-2188
redhat critical https://access.redhat.com/security/cve/CVE-2010-2188
ubuntu medium CVE-2010-2188 medium priority: Ubuntu including 2 source packages (adobe-flashplugin, flashplugin-nonfree), 12 status rows across 6 suites (dapper, hardy, jaunty, karmic, lucid, upstream): released 10, DNE 1, ignored 1. https://ubuntu.com/security/CVE-2010-2188

CVE-2010-2188 的 NVD 評估備註

影響: Per: http://www.adobe.com/support/security/bulletins/apsb10-14.html 'Affected software versions Adobe Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris Adobe AIR 1.5.3.9130 and earlier versions for Windows, Macintosh and Linux'

CVE-2010-2188 的影響軟體 / 設定

廠商 產品 版本 原始 CPE
adobe flash_player 9.0.16 cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*
adobe flash_player 9.0.20 cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*
adobe flash_player 9.0.20.0 cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*
adobe flash_player 9.0.28 cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*
adobe flash_player 9.0.28.0 cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*
adobe flash_player 9.0.31 cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*
adobe flash_player 9.0.31.0 cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*
adobe flash_player 9.0.45.0 cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*
adobe flash_player 9.0.47.0 cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*
adobe flash_player 9.0.48.0 cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*
adobe flash_player 9.0.115.0 cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*
adobe flash_player 9.0.124.0 cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*
adobe flash_player 9.0.125.0 cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*
adobe flash_player 9.0.151.0 cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*
adobe flash_player 9.0.152.0 cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*
adobe flash_player 9.0.159.0 cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*
adobe flash_player 9.0.246.0 cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*
adobe flash_player 9.0.260.0 cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*
adobe flash_player 9.0.262.0 cpe:2.3:a:adobe:flash_player:9.0.262.0:*:*:*:*:*:*:*
adobe flash_player <= 10.0.45.2 cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
adobe flash_player 10.0.0.584 cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*
adobe flash_player 10.0.12.10 cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*
adobe flash_player 10.0.12.36 cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*
adobe flash_player 10.0.15.3 cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*
adobe flash_player 10.0.22.87 cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*
adobe flash_player 10.0.32.18 cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*
adobe flash_player 10.0.42.34 cpe:2.3:a:adobe:flash_player:10.0.42.34:*:*:*:*:*:*:*
adobe flash_player 6.0.79 cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*
adobe flash_player 7.0 cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*
adobe flash_player 7.0.1 cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*
adobe flash_player 7.0.14.0 cpe:2.3:a:adobe:flash_player:7.0.14.0:*:*:*:*:*:*:*
adobe flash_player 7.0.19.0 cpe:2.3:a:adobe:flash_player:7.0.19.0:*:*:*:*:*:*:*
adobe flash_player 7.0.24.0 cpe:2.3:a:adobe:flash_player:7.0.24.0:*:*:*:*:*:*:*
adobe flash_player 7.0.25 cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*
adobe flash_player 7.0.53.0 cpe:2.3:a:adobe:flash_player:7.0.53.0:*:*:*:*:*:*:*
adobe flash_player 7.0.60.0 cpe:2.3:a:adobe:flash_player:7.0.60.0:*:*:*:*:*:*:*
adobe flash_player 7.0.61.0 cpe:2.3:a:adobe:flash_player:7.0.61.0:*:*:*:*:*:*:*
adobe flash_player 7.0.63 cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*
adobe flash_player 7.0.66.0 cpe:2.3:a:adobe:flash_player:7.0.66.0:*:*:*:*:*:*:*
adobe flash_player 7.0.67.0 cpe:2.3:a:adobe:flash_player:7.0.67.0:*:*:*:*:*:*:*
adobe flash_player 7.0.68.0 cpe:2.3:a:adobe:flash_player:7.0.68.0:*:*:*:*:*:*:*
adobe flash_player 7.0.69.0 cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*
adobe flash_player 7.0.70.0 cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*
adobe flash_player 7.0.73.0 cpe:2.3:a:adobe:flash_player:7.0.73.0:*:*:*:*:*:*:*
adobe flash_player 7.1 cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*
adobe flash_player 7.1.1 cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*
adobe flash_player 7.2 cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*
adobe flash_player 8.0 cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*
adobe flash_player 8.0.22.0 cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*
adobe flash_player 8.0.24.0 cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*
adobe flash_player 8.0.33.0 cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*
adobe flash_player 8.0.34.0 cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*
adobe flash_player 8.0.35.0 cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*
adobe flash_player 8.0.39.0 cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*
adobe flash_player 8.0.42.0 cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*
macromedia flash_player 5.0 cpe:2.3:a:macromedia:flash_player:5.0:*:*:*:*:*:*:*
macromedia flash_player 5.0.30.0 cpe:2.3:a:macromedia:flash_player:5.0.30.0:*:*:*:*:*:*:*
macromedia flash_player 5.0.41.0 cpe:2.3:a:macromedia:flash_player:5.0.41.0:*:*:*:*:*:*:*
macromedia flash_player 5.0.42.0 cpe:2.3:a:macromedia:flash_player:5.0.42.0:*:*:*:*:*:*:*
macromedia flash_player 5.0.58.0 cpe:2.3:a:macromedia:flash_player:5.0.58.0:*:*:*:*:*:*:*
adobe air <= 1.5.3.9130 cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
adobe air 1.0 cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*
adobe air 1.1 cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*
adobe air 1.5 cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*
adobe air 1.5.1 cpe:2.3:a:adobe:air:1.5.1:*:*:*:*:*:*:*
adobe air 1.5.2 cpe:2.3:a:adobe:air:1.5.2:*:*:*:*:*:*:*
adobe air 1.5.3 cpe:2.3:a:adobe:air:1.5.3:*:*:*:*:*:*:*

CVE-2010-2188 的參考連結

URL 標籤
http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
http://secunia.com/advisories/40144
http://secunia.com/advisories/40545
http://secunia.com/advisories/43026
http://security.gentoo.org/glsa/glsa-201101-09.xml
http://securitytracker.com/id?1024085
http://securitytracker.com/id?1024086
http://support.apple.com/kb/HT4435
http://www.adobe.com/support/security/bulletins/apsb10-14.html Patch Vendor Advisory
http://www.adobe.com/support/security/bulletins/apsb10-16.html
http://www.redhat.com/support/errata/RHSA-2010-0464.html
http://www.redhat.com/support/errata/RHSA-2010-0470.html
http://www.securityfocus.com/archive/1/511924/100/0/threaded
http://www.securityfocus.com/bid/40759
http://www.securityfocus.com/bid/40798
http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt
http://www.us-cert.gov/cas/techalerts/TA10-162A.html US Government Resource
http://www.vupen.com/english/advisories/2010/1421
http://www.vupen.com/english/advisories/2010/1432
http://www.vupen.com/english/advisories/2010/1434
http://www.vupen.com/english/advisories/2010/1453
http://www.vupen.com/english/advisories/2010/1482
http://www.vupen.com/english/advisories/2010/1522
http://www.vupen.com/english/advisories/2010/1793
http://www.vupen.com/english/advisories/2011/0192
http://www.zerodayinitiative.com/advisories/ZDI-10-111
https://exchange.xforce.ibmcloud.com/vulnerabilities/59337
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16271
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6946
cvelogic Threat Intelligence