CVE-2010-2162: Adobe Air

High severity, CVSS 9.3. EPSS: 6.8% chance of exploitation in the next 30 days.

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via vectors related to improper length calculation and the (1) STSC, (2) STSZ, and (3) STCO atoms.

Affected products

• Adobe Air: up to and including 1.5.3.9130; version 1.0 only; version 1.1 only; version 1.5 only; version 1.5.1 only; version 1.5.2 only; …
• Adobe Flash Player: version 9.0.16 only; version 9.0.20 only; version 9.0.20.0 only; version 9.0.28 only; version 9.0.28.0 only; version 9.0.31 only; …
• Macromedia Flash Player: version 5.0 only; version 5.0.30.0 only; version 5.0.41.0 only; version 5.0.42.0 only; version 5.0.58.0 only

Published 2010-06-15. Last modified 2026-06-16.