[Forgot Password]
Login  Register Subscribe

23631

 
 

115038

 
 

96174

 
 

909

 
 

78077

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2009-0520

Date: (C)2009-02-26   (M)2017-10-04
 
CVSS Score: 9.3Access Vector: NETWORK
Exploitability Subscore: 8.6Access Complexity: MEDIUM
Impact Subscore: 10.0Authentication: NONE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."

Reference:
SECTRACK-1021750
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=773
SUNALERT-254909
BID-33880
SECUNIA-34012
SECUNIA-34226
SECUNIA-34293
SECUNIA-35074
ADV-2009-0513
ADV-2009-0743
ADV-2009-1297
APPLE-SA-2009-05-12
GLSA-200903-23
IAVM:2009-A-0017
RHSA-2009:0332
RHSA-2009:0334
TA09-133A
flash-invalid-object-bo(48887)
http://isc.sans.org/diary.html?storyid=5929
http://support.apple.com/kb/HT3549
http://www.adobe.com/support/security/bulletins/apsb09-01.html
https://bugzilla.redhat.com/show_bug.cgi?id=487142

CPE    30
cpe:/a:adobe:flash_player:9.0.124.0
cpe:/a:adobe:flash_player:7.0.69.0
cpe:/a:adobe:flash_player:7.0.70.0
cpe:/a:adobe:flash_player:10.0.0.584
...
CWE    1
CWE-119
OVAL    6
oval:org.secpod.oval:def:18031
oval:org.secpod.oval:def:18030
oval:org.mitre.oval:def:6593
oval:org.secpod.oval:def:18061
...

© 2013 SecPod Technologies