CVE-2009-1869
CVE-2009-1869
Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/33134unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.htmlhttp://lists.apple.com/archives/security-announce/2009/Sep/msg00004.htmlhttp://osvdb.org/56777http://roeehay.blogspot.com/2009/08/advisory-adobe-flash-player-avm2.htmlhttp://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.htmlhttp://secunia.com/advisories/36193http://secunia.com/advisories/36374http://secunia.com/advisories/36701http://security.gentoo.org/glsa/glsa-200908-04.xmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/52181https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15994https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6998