CVE Vulnerabilities

CVE-2009-3799

Published: Dec 10, 2009 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to generation of ActionScript exception handlers.

Affected Software

Name Vendor Start Version End Version
Adobe_air Adobe * 1.5.2 (including)
Adobe_air Adobe 1.0 (including) 1.0 (including)
Adobe_air Adobe 1.0.1 (including) 1.0.1 (including)
Adobe_air Adobe 1.1 (including) 1.1 (including)
Adobe_air Adobe 1.5.1 (including) 1.5.1 (including)
Flash_player Adobe * 10.0.32.18 (including)
Flash_player Adobe 7.0 (including) 7.0 (including)
Flash_player Adobe 7.0.1 (including) 7.0.1 (including)
Flash_player Adobe 7.0.25 (including) 7.0.25 (including)
Flash_player Adobe 7.0.63 (including) 7.0.63 (including)
Flash_player Adobe 7.0.69.0 (including) 7.0.69.0 (including)
Flash_player Adobe 7.0.70.0 (including) 7.0.70.0 (including)
Flash_player Adobe 7.1 (including) 7.1 (including)
Flash_player Adobe 7.1.1 (including) 7.1.1 (including)
Flash_player Adobe 7.2 (including) 7.2 (including)
Flash_player Adobe 8 (including) 8 (including)
Flash_player Adobe 8.0 (including) 8.0 (including)
Flash_player Adobe 8.0.24.0 (including) 8.0.24.0 (including)
Flash_player Adobe 8.0.34.0 (including) 8.0.34.0 (including)
Flash_player Adobe 8.0.35.0 (including) 8.0.35.0 (including)
Flash_player Adobe 8.0.39.0 (including) 8.0.39.0 (including)
Flash_player Adobe 9.0 (including) 9.0 (including)
Flash_player Adobe 9.0.16 (including) 9.0.16 (including)
Flash_player Adobe 9.0.18d60 (including) 9.0.18d60 (including)
Flash_player Adobe 9.0.20 (including) 9.0.20 (including)
Flash_player Adobe 9.0.20.0 (including) 9.0.20.0 (including)
Flash_player Adobe 9.0.28 (including) 9.0.28 (including)
Flash_player Adobe 9.0.28.0 (including) 9.0.28.0 (including)
Flash_player Adobe 9.0.31 (including) 9.0.31 (including)
Flash_player Adobe 9.0.31.0 (including) 9.0.31.0 (including)
Flash_player Adobe 9.0.45.0 (including) 9.0.45.0 (including)
Flash_player Adobe 9.0.47.0 (including) 9.0.47.0 (including)
Flash_player Adobe 9.0.112.0 (including) 9.0.112.0 (including)
Flash_player Adobe 9.0.114.0 (including) 9.0.114.0 (including)
Flash_player Adobe 9.0.115.0 (including) 9.0.115.0 (including)
Flash_player Adobe 9.0.124.0 (including) 9.0.124.0 (including)
Flash_player Adobe 9.0.155.0 (including) 9.0.155.0 (including)
Flash_player Adobe 9.0.159.0 (including) 9.0.159.0 (including)
Flash_player Adobe 9.125.0 (including) 9.125.0 (including)
Flash_player Adobe 10.0.0.584 (including) 10.0.0.584 (including)
Flash_player Adobe 10.0.12.10 (including) 10.0.12.10 (including)
Flash_player Adobe 10.0.12.36 (including) 10.0.12.36 (including)
Flash_player Adobe 10.0.22.87 (including) 10.0.22.87 (including)

References