Lucene search

[email protected]CVE-2009-1868

HistoryJul 31, 2009 - 7:30 p.m.

CVE-2009-1868

2009-07-3119:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-1868

memory corruption

adobe flash player

adobe air

code execution

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.2%

JSON

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing.

Affected configurations

NVD

Node

adobeairRange≤1.5.1

adobeairMatch1.0

adobeairMatch1.01

adobeairMatch1.1

adobeairMatch1.5

adobeflash_playerRange≤10.0.22.87

adobeflash_playerMatch7.0

adobeflash_playerMatch7.0.1

adobeflash_playerMatch7.0.25

adobeflash_playerMatch7.0.63

adobeflash_playerMatch7.0.63linux

adobeflash_playerMatch7.0.69.0

adobeflash_playerMatch7.0.70.0

adobeflash_playerMatch7.1

adobeflash_playerMatch7.1.1

adobeflash_playerMatch7.2

adobeflash_playerMatch8.0

adobeflash_playerMatch8.0basic

adobeflash_playerMatch8.0pro

adobeflash_playerMatch8.0.24.0

adobeflash_playerMatch8.0.34.0

adobeflash_playerMatch8.0.35.0

adobeflash_playerMatch8.0.39.0

adobeflash_playerMatch9.0.16

adobeflash_playerMatch9.0.20

adobeflash_playerMatch9.0.20.0

adobeflash_playerMatch9.0.28

adobeflash_playerMatch9.0.28.0

adobeflash_playerMatch9.0.31.0

adobeflash_playerMatch9.0.45.0

adobeflash_playerMatch9.0.47.0

adobeflash_playerMatch9.0.48.0

adobeflash_playerMatch9.0.112.0

adobeflash_playerMatch9.0.114.0

adobeflash_playerMatch9.0.115.0

adobeflash_playerMatch9.0.124.0

adobeflash_playerMatch10.0.0.584

adobeflash_playerMatch10.0.12.10

adobeflash_playerMatch10.0.12.36

adobeflexMatch3.0

CPENameOperatorVersion
adobe:airadobe airle1.5.1
adobe:airadobe aireq1.0
adobe:airadobe aireq1.01
adobe:airadobe aireq1.1
adobe:airadobe aireq1.5
adobe:flash_playeradobe flash playerle10.0.22.87
adobe:flash_playeradobe flash playereq7.0
adobe:flash_playeradobe flash playereq7.0.1
adobe:flash_playeradobe flash playereq7.0.25
adobe:flash_playeradobe flash playereq7.0.63

CPE	Name	Operator	Version
adobe:air	adobe air	le	1.5.1
adobe:air	adobe air	eq	1.0
adobe:air	adobe air	eq	1.01
adobe:air	adobe air	eq	1.1
adobe:air	adobe air	eq	1.5
adobe:flash_player	adobe flash player	le	10.0.22.87
adobe:flash_player	adobe flash player	eq	7.0
adobe:flash_player	adobe flash player	eq	7.0.1
adobe:flash_player	adobe flash player	eq	7.0.25
adobe:flash_player	adobe flash player	eq	7.0.63