Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2010-0187

33
FAUCET Score

CVE-2010-0187 is a denial-of-service vulnerability affecting Adobe Flash Player before version 10.0.45.2 and Adobe AIR before 1.5.3.9130. A remote attacker can exploit this by crafting a malicious SWF file, leading to an application crash. The vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and a partial impact on availability. While there is no evidence of active exploitation in the wild, an exploit for Internet Explorer 6/7/8 targeting the Shockwave Flash Object has been published on ExploitDB. Community discussion and media coverage for this CVE are minimal.

Impacted Technologies

VendorProductVersion(s)CPE
<= 1.5.3.9120CPE matchmatch criteria
cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*
1.0CPE matchmatch criteria
cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*
1.1CPE matchmatch criteria
cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*
1.5.1CPE matchmatch criteria
cpe:2.3:a:adobe:adobe_air:1.5.1:*:*:*:*:*:*:*
1.5.2CPE matchmatch criteria
cpe:2.3:a:adobe:adobe_air:1.5.2:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

4.3MEDIUM

AV:N/AC:M/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
15.63%
Probability of exploitation in next 30 days
EPSS Percentile
96.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
ExploitDB: EDB-11182 · Jan 18, 2010
This CVE's current EPSS score of 0.1563 is in the 97th percentile among its peer group of 19,958 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

redhatpatch availablevia redhat_api
Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: flash-plugin-0:10.0.45.2-1.el5
View patch
adobevendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2010-0187Low

flash-plugin: possible player crash (APSB10-06)

Feb 11, 2010

References

lists.apple.com / archives/security-announce/2010//Jun/msg00001.html
lists.opensuse.org / opensuse-security-announce/2010-03/msg00004.html
bugzilla.redhat.com / show_bug.cgi
sebug.net / exploit/18967
secunia.com / advisories/38547
secunia.com / advisories/38915
secunia.com / advisories/40220
secunia.com / advisories/43026
security.gentoo.org / glsa/glsa-201101-09.xml
securitytracker.com / id
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16125
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8393
rhn.redhat.com / errata/RHSA-2010-0102.html
support.apple.com / kb/HT4188
adobe.com / support/security/bulletins/apsb10-06.html
Vendor Advisory
exploit-db.com / exploits/11182
Exploit
securityfocus.com / bid/38200
vupen.com / english/advisories/2010/1481
vupen.com / english/advisories/2011/0192