CVE:CVE-2010-3976
CNNVD:CNNVD-201010-294
Adobe Flash Player是美国奥多比（Adobe）公司的一款跨平台、基于浏览器的多媒体播放器产品。该产品支持跨屏幕和浏览器查看应用程序、内容和视频。
基于Windows平台的Adobe Flash Player 9.0.289.0之前版本和10.1.102.64之前的10.x版本中存在不可信搜索路径漏洞。本地用户及远程攻击者可借助与Flash Player处理的文件位于同一文件夹下的Trojan木马dwmapi.dll执行任意代码并进行DLL劫持攻击。
solution:Upgrade adobe flash_player to a higher version than 9.0.277.0,9.0.16,9.0.18d60,9.0.20,9.0.20.0,9.0.28,9.0.28.0,9.0.31,9.0.31.0,9.0.45.0,9.0.47.0,9.0.48.0,9.0.112.0,9.0.114.0,9.0.115.0,9.0.124.0,9.0.125.0,9.0.151.0,9.0.152.0,9.0.155.0,9.0.159.0,9.0.246.0,9.0.260.0,9.0.262.0,10.1.92.10,10.0.0.584,10.0.12.10,10.0.12.36,10.0.15.3,10.0.22.87,10.0.32.18,10.0.42.34,10.0.45.2,10.1.52.14.1,10.1.52.15,10.1.53.64,10.1.82.76,10.1.85.3,10.1.92.8,10.1.95.1,10.1.95.2,and avoid the version (,9.0.277.0],9.0.16,9.0.18d60,9.0.20,9.0.20.0,9.0.28,9.0.28.0,9.0.31,9.0.31.0,9.0.45.0,9.0.47.0,9.0.48.0,9.0.112.0,9.0.114.0,9.0.115.0,9.0.124.0,9.0.125.0,9.0.151.0,9.0.152.0,9.0.155.0,9.0.159.0,9.0.246.0,9.0.260.0,9.0.262.0,(,10.1.92.10],10.0.0.584,10.0.12.10,10.0.12.36,10.0.15.3,10.0.22.87,10.0.32.18,10.0.42.34,10.0.45.2,10.1.52.14.1,10.1.52.15,10.1.53.64,10.1.82.76,10.1.85.3,10.1.92.8,10.1.95.1,10.1.95.2