CVE-2010-2189

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, when used in conjunction with VMWare Tools on a VMWare platform, allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.

• CWE-119

• http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
• http://secunia.com/advisories/40144
• http://secunia.com/advisories/40545
• http://secunia.com/advisories/43026
• http://security.gentoo.org/glsa/glsa-201101-09.xml
• http://securitytracker.com/id?1024085
• http://securitytracker.com/id?1024086
• http://support.apple.com/kb/HT4435
• http://www.adobe.com/support/security/bulletins/apsb10-14.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/40759
• http://www.securityfocus.com/bid/40799
• http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt
• http://www.us-cert.gov/cas/techalerts/TA10-162A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2010/1421
• http://www.vupen.com/english/advisories/2010/1434
• http://www.vupen.com/english/advisories/2010/1482
• http://www.vupen.com/english/advisories/2010/1522
• http://www.vupen.com/english/advisories/2010/1793
• http://www.vupen.com/english/advisories/2011/0192
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59338
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6991
• http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
• http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00000.html
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
• http://secunia.com/advisories/40144
• http://secunia.com/advisories/40545
• http://secunia.com/advisories/43026
• http://security.gentoo.org/glsa/glsa-201101-09.xml
• http://securitytracker.com/id?1024085
• http://securitytracker.com/id?1024086
• http://support.apple.com/kb/HT4435
• http://www.adobe.com/support/security/bulletins/apsb10-14.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/40759
• http://www.securityfocus.com/bid/40799
• http://www.turbolinux.co.jp/security/2010/TLSA-2010-19j.txt
• http://www.us-cert.gov/cas/techalerts/TA10-162A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2010/1421
• http://www.vupen.com/english/advisories/2010/1434
• http://www.vupen.com/english/advisories/2010/1482
• http://www.vupen.com/english/advisories/2010/1522
• http://www.vupen.com/english/advisories/2010/1793
• http://www.vupen.com/english/advisories/2011/0192
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59338
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6991

Published

Jun 15, 2010

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2010-2183Integer overflow in Adobe Flash Player before 9.0.277.0 and …
• CVE-2010-2184Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…
• CVE-2010-2185Buffer overflow in Adobe Flash Player before 9.0.277.0 and 1…
• CVE-2010-2186Unspecified vulnerability in Adobe Flash Player before 9.0.2…
• CVE-2010-2187Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…
• CVE-2010-2188Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.…
• CVE-2010-2190The (1) trim, (2) ltrim, (3) rtrim, and (4) substr_replace f…
• CVE-2010-2191The (1) parse_str, (2) preg_match, (3) unpack, and (4) pack …
• CVE-2010-2192The make_lockdir_name function in policy.c in pmount 0.9.18 …
• CVE-2010-2193Multiple unspecified vulnerabilities in the CA (1) PSFormX a…
• CVE-2010-2195bozotic HTTP server (aka bozohttpd) 20090522 through 2010051…
• CVE-2010-2197rpmbuild in RPM 4.8.0 and earlier does not properly parse th…