CVE-2010-0378

Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a "Movie Unloading Vulnerability."

• CWE-416

• http://secunia.com/advisories/27105Broken Link, Vendor Advisory
• http://secunia.com/secunia_research/2007-77/Broken Link, Vendor Advisory
• http://securitytracker.com/id?1023435Broken Link, Third Party Advisory, VDB Entry
• http://www.kb.cert.org/vuls/id/204889Third Party Advisory, US Government Resource
• http://www.microsoft.com/technet/security/advisory/979267.mspxBroken Link, Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7580Broken Link
• http://secunia.com/advisories/27105Broken Link, Vendor Advisory
• http://secunia.com/secunia_research/2007-77/Broken Link, Vendor Advisory
• http://securitytracker.com/id?1023435Broken Link, Third Party Advisory, VDB Entry
• http://www.kb.cert.org/vuls/id/204889Third Party Advisory, US Government Resource
• http://www.microsoft.com/technet/security/advisory/979267.mspxBroken Link, Patch, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7580Broken Link

Published

Jan 21, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-0372SQL injection vulnerability in the Articlemanager (com_artic…
• CVE-2010-0373SQL injection vulnerability in the libros (com_libros) compo…
• CVE-2010-0374Cross-site scripting (XSS) vulnerability in the Marketplace …
• CVE-2010-0375SQL injection vulnerability in product_list.php in JCE-Tech …
• CVE-2010-0376Cross-site scripting (XSS) vulnerability in product_list.php…
• CVE-2010-0377SQL injection vulnerability in modules/arcade/index.php in P…
• CVE-2010-0379Multiple unspecified vulnerabilities in the Macromedia Flash…
• CVE-2010-0380install.php in JCE-Tech PHP Calendars, downloaded 20100121, …
• CVE-2010-0381SQL injection vulnerability in modules/arcade/index.php in P…
• CVE-2010-0382ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 befor…
• CVE-2010-0383Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses …
• CVE-2010-0384Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a dire…