CVEvulnerability

CVE-2009-0520

9.3 HIGH Published 2009-02-26 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-02-26
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."

Affected configurations

• adobe air 1.5 • adobe flash player (<= 10.0.12.36) • adobe flash player 7.0 • adobe flash player 7.0.1 • adobe flash player 7.0.25 • adobe flash player 7.0.63 • adobe flash player 7.0.69.0 • adobe flash player 7.0.70.0 • adobe flash player 7.1 • adobe flash player 7.1.1 • adobe flash player 7.2 • adobe flash player 8.0 • adobe flash player 8.0.24.0 • adobe flash player 8.0.34.0 • adobe flash player 8.0.35.0 • adobe flash player 8.0.39.0 • adobe flash player 9.0.16 • adobe flash player 9.0.20 • adobe flash player 9.0.20.0 • adobe flash player 9.0.28 • adobe flash player 9.0.28.0 • adobe flash player 9.0.31.0 • adobe flash player 9.0.45.0 • adobe flash player 9.0.47.0 • adobe flash player 9.0.48.0 • adobe flash player 9.0.112.0 • adobe flash player 9.0.114.0 • adobe flash player 9.0.115.0 • adobe flash player 9.0.124.0 • adobe flash player 10.0.0.584 • adobe flash player 10.0.12.10 • adobe flash player cs3 • adobe flash player cs4 • adobe flash player for linux (<= 10.0.15.3) • adobe flex 3.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References