GCVE-110-CERTCC-2010-486225

Advisory PublishedCVSS 9.0/10

Vulnetix · Advisory published June 4, 2010

Adobe Flash contains a vulnerability in the handling of the ActionScript newfunction instruction, which can allow a remote, unauthenticated attacker to execute arbitrary code.

Download JSON Open in Console

Risk Scores

CVSS 2.0

9.0/10

Critical · AV:N/AC:M/Au:N/C:C/I:C/A:P

certcc-cam

impact19population20exploitation18widely_known6score_current43.092ease_of_exploitation8

certcc-vrda

d1_impact4d1_population4d1_direct_report1

certcc-cvss-temporal-env

temporal_score7remediation_levelOFreport_confidenceCenvironmental_score7target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2010-1297

References

Adobe Flash ActionScript AVM2 newfunction vulnerability

url

Adobe Flash ActionScript AVM2 newfunction vulnerability

url

Adobe Flash ActionScript AVM2 newfunction vulnerability

url

Adobe Flash ActionScript AVM2 newfunction vulnerability

url

Adobe Flash ActionScript AVM2 newfunction vulnerability

url

Adobe Flash ActionScript AVM2 newfunction vulnerability

url

Adobe Flash ActionScript AVM2 newfunction vulnerability

url

Adobe Flash ActionScript AVM2 newfunction vulnerability

url

Adobe Flash ActionScript AVM2 newfunction vulnerability

url

Adobe Flash ActionScript AVM2 newfunction vulnerability

url

Adobe Flash ActionScript AVM2 newfunction vulnerability

url

Adobe Flash ActionScript AVM2 newfunction vulnerability

advisory

Browse GCVE Records

74,267 records in the GCVE database · Updated July 22, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON