Bug 602847 (APSB10-14, CVE-2009-3793, CVE-2010-2160, CVE-2010-2161, CVE-2010-2162, CVE-2010-2163, CVE-2010-2164, CVE-2010-2165, CVE-2010-2166, CVE-2010-2167, CVE-2010-2169, CVE-2010-2170, CVE-2010-2171, CVE-2010-2173, CVE-2010-2174, CVE-2010-2175, CVE-2010-2176, CVE-2010-2177, CVE-2010-2178, CVE-2010-2179, CVE-2010-2180, CVE-2010-2181, CVE-2010-2182, CVE-2010-2183, CVE-2010-2184, CVE-2010-2185, CVE-2010-2186, CVE-2010-2187, CVE-2010-2188)

Today, 2010-06-10, Adobe is planning to release an update
for Adobe Flash Player of version 10.0.45.2 (new version
is 10.1.53.64), to address multiple security issues allowing
code execution, whose description is detailed in the Adobe
Security Bulletin APSB10-14:

  [1] http://www.adobe.com/support/security/bulletins/apsb10-14.html

* This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-1297). Note: There are reports that this
issue is being actively exploited in the wild.

* This update resolves a memory exhaustion vulnerability that could lead
to code execution (CVE-2009-3793).

* This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-2160).

* This update resolves an indexing vulnerability that could lead to code 
execution (CVE-2010-2161).

* This update resolves a heap corruption vulnerability that could lead
to code execution (CVE-2010-2162).

* This update resolves multiple vulnerabilities that could lead to code 
execution (CVE-2010-2163).

* This update resolves a use after free vulnerability that could lead
to code execution (CVE-2010-2164).

* This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-2165).

* This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-2166).

* This update resolves multiple heap overflow vulnerabilities that could
lead to code execution (CVE-2010-2167).

* This update resolves a pointer memory corruption that could lead to
code execution (CVE-2010-2169).

* This update resolves an integer overflow vulnerability that could lead
to code execution (CVE-2010-2170).

* This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-2171).

* This update resolves a denial of service issue on some UNIX platforms
  (Flash Player 9 only) (CVE-2010-2172).

* This update resolves an invalid pointer vulnerability that could lead
to code execution (CVE-2010-2173).

* This update resolves an invalid pointer vulnerability that could lead
to code execution (CVE-2010-2174).

* This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-2175).

* This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-2176).

* This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-2177).

* This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-2178).

* This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-2180).

* This update resolves an integer overflow vulnerability that could lead
to code execution (CVE-2010-2181).

* This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-2182).

* This update resolves a integer overflow vulnerability that could lead
to code execution (CVE-2010-2183).

* This update resolves a memory corruption vulnerability that could lead
to code execution (CVE-2010-2184).

* This update resolves a buffer overflow vulnerability that could lead
to code execution (CVE-2010-2185).

Adobe Security Bulletin APSB10-14 also mentions one cross-site scripting
(XSS) flaw, which is also scheduled to be addressed within this update:

* This update resolves a URL parsing vulnerability that could lead
to cross-site scripting (Firefox and Chrome browsers only) (CVE-2010-2179).

Note: The CVSSv2 Base Score for this issue is:
      CVSSv2: 4.9/AV:N/AC:M/Au:S/C:P/I:P/A:N

i.e. lower than for the rest of above listed flaws, potentially leading
to arbitrary code execution. But this flaw was included in this Bugzilla
entry too, to list all issues, listed in [1].

And one denial of service issue:

* This update resolves a denial of service issue (CVE-2008-4546).

Red Hat is tracking this denial of service issue via dedicated Red Hat
Bugzilla entry, reachable at:
  [2] https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2008-4546