CVE-2007-3456 Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted....
HighCVSS 9.3
EPSS 47.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | <= 9.0.45.0 | No fix listed |
| Adobe flash player | = 9.0.16 | No fix listed |
| Adobe flash player | = 9.0.18d60 | No fix listed |
| Adobe flash player | = 9.0.20 | No fix listed |
| Adobe flash player | = 9.0.20.0 | No fix listed |
| Adobe flash player | = 9.0.28 | No fix listed |
| Adobe flash player | = 9.0.28.0 | No fix listed |
| Adobe flash player | = 9.0.31 | No fix listed |
| Adobe flash player | = 9.0.31.0 | No fix listed |
References
- docs.info.apple.com
- APPLE-SA-2007-11-14 vendor-advisory
- 38054 vdb-entry
- 26027 patch third-party-advisory vendor-advisory
- 26057 third-party-advisory vendor-advisory
- 26118 third-party-advisory vendor-advisory
- 26357 third-party-advisory vendor-advisory
- 27643 third-party-advisory vendor-advisory
- 28068 third-party-advisory vendor-advisory
- 103167 vendor-advisory
- 201506 vendor-advisory
- www.adobe.com vendor-advisory
- GLSA-200708-01 vendor-advisory
- VU#730785 third-party-advisory us-government-resource
- www.mindedsecurity.com
- SUSE-SA:2007:046 vendor-advisory
- 20070713 [MSA01110707] Flash Player/Plugin Video file parsing Remote CodeExecution mailing-list
- 20070719 Wii's Internet Channel affected to Flash FLV parser vulnerability mailing-list
- 20070720 FLEA-2007-0032-1: flashplayer mailing-list
- 24856 vdb-entry
- 26444 vdb-entry
- 1018359 vdb-entry
- TA07-192A third-party-advisory us-government-resource
- TA07-319A third-party-advisory us-government-resource
- ADV-2007-2497 vdb-entry vendor-advisory
- ADV-2007-3868 vdb-entry vendor-advisory
- ADV-2007-4190 vdb-entry vendor-advisory
- flashplayer-swf-code-execution(35337) vdb-entry
- oval:org.mitre.oval:def:11493 signature vdb-entry
- RHSA-2007:0696 vendor-advisory