CVE-2009-3799

Severity

93%

Complexity

86%

Confidentiality

165%

Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."

Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."

CVSS 2.0 Base Score 9.3. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:C/I:C/A:C).

Overview

First reported 15 years ago

2009-12-10 19:30:00

Last updated 6 years ago

2018-10-30 16:26:00

Affected Software

Adobe Adobe Integrated Runtime (AIR) 1.0

1.0

Adobe Adobe Integrated Runtime 1.0.1

1.0.1

Adobe Adobe Integrated Runtime (AIR) 1.1

1.1

Adobe Adobe Integrated Runtime 1.5.1

1.5.1

Adobe Adobe Integrated Runtime (AIR)

Adobe Flash MX 2004

7.0

アドビシステムズ フラッシュ MX 2004

7.0.1

アドビシステムズ フラッシュプレーヤー 7.0.25

7.0.25

アドビシステムズ フラッシュプレーヤー 7.0.63

7.0.63

アドビシステムズ フラッシュプレーヤー 7.0.69.0

7.0.69.0

アドビシステムズ フラッシュプレーヤー 7.0.70.0

7.0.70.0

Adobe Flash MX 2004

7.1

Adobe Flash MX 2004

7.1.1

アドビシステムズ フラッシュ MX 2004

7.2

アドビシステムズ フラッシュプレーヤー 8.0

8.0

アドビシステムズ フラッシュプレーヤー 8.0.24.0

8.0.24.0

アドビシステムズ フラッシュプレーヤー 8.0.34.0

8.0.34.0

Adobe Flash Player 8.0.35.0

8.0.35.0

Adobe Flash Player 8.0.39.0

8.0.39.0

Adobe Flash Player 9.0

9.0

アドビシステムズ フラッシュプレーヤー 9.0.16

9.0.16

Adobe Flash Player 9.0.18d60

9.0.18d60

Adobe Flash Player 9.0.20

9.0.20

アドビシステムズ フラッシュプレーヤー プラグイン9.0.20.0

9.0.20.0

アドビシステムズ フラッシュプレーヤー 9.0.28

9.0.28

アドビシステムズ フラッシュプレーヤー 9.0.28.0

9.0.28.0

Adobe Flash Player 9.0.31

9.0.31

Adobe Flash Player 9.0.31.0

9.0.31.0

アドビシステムズ フラッシュプレーヤー 9.0.45.0

9.0.45.0

Adobe Flash Player 9.0.47.0

9.0.47.0

Adobe Flash Player 9.0.112.0

9.0.112.0

アドビシステムズ フラッシュプレーヤー 9.0.114.0

9.0.114.0

Adobe Flash Player 9.0.115.0

9.0.115.0

Adobe Flash Player 9.0.124.0

9.0.124.0

Adobe Flash 9.0.155.0

9.0.155.0

Adobe Flash Player 9.0.159.0

9.0.159.0

Adobe Flash Player 9.125.0

9.125.0

Adobe Flash Player 10.0.0.584

10.0.0.584

Adobe Flash Player 10.0.12.10

10.0.12.10

Adobe Flash Player 10.0.12.36

10.0.12.36

Adobe Flash Player 10.0.22.87

10.0.22.87

アドビシステムズ フラッシュプレーヤー

References

APPLE-SA-2010-01-19-1

SUSE-SA:2009:062

60889

37584

Vendor Advisory

37902

38241

1023306

Patch

1023307

Patch

1021716

http://support.apple.com/kb/HT4004

http://www.adobe.com/support/security/bulletins/apsb09-19.html

Patch, Vendor Advisory

RHSA-2009:1657

Patch

RHSA-2009:1658

Patch

20091209 ZDI-09-093: Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability

37199

TA09-343A

US Government Resource

ADV-2009-3456

Patch, Vendor Advisory

ADV-2010-0173

http://zerodayinitiative.com/advisories/ZDI-09-093/

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=543857

Patch

flash-air-unspecified-overflow(54635)

oval:org.mitre.oval:def:16315

oval:org.mitre.oval:def:7191

oval:org.mitre.oval:def:8208

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.