SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

[Forgot Password]

Paid content will be excluded from the download.

Download | Alert*

CVE

CVE-2009-3797

Date: (C)2009-12-10 (M)2024-02-22

Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Reference:

SUNALERT-1021716

SECTRACK-1023306

SECTRACK-1023307

APPLE-SA-2010-01-19-1

SUSE-SA:2009:062

flash-air-corruption-code-execution(54633)

http://support.apple.com/kb/HT4004

http://www.adobe.com/support/security/bulletins/apsb09-19.html

https://bugzilla.redhat.com/show_bug.cgi?id=543857

oval:org.mitre.oval:def:15795

oval:org.mitre.oval:def:7140

oval:org.mitre.oval:def:8350

cpe:/a:adobe:flash_player:10.0.12.10
cpe:/a:adobe:adobe_air
cpe:/a:adobe:flash_player:10.0.12.36
cpe:/a:adobe:adobe_air:1.0.1
...

oval:org.secpod.oval:def:17982
oval:org.secpod.oval:def:17989
oval:org.secpod.oval:def:17981
oval:org.secpod.oval:def:17990
...

© SecPod Technologies