CVE-2008-4473 Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.
HighCVSS 9.3
EPSS 7.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe flash player | = cs3 | No fix listed |
| Adobe flash player | = mx_2004 | No fix listed |
References
- 32246 third-party-advisory vendor-advisory
- security-assessment.com
- 4429 third-party-advisory
- 1021060 vdb-entry
- www.adobe.com vendor-advisory
- 20081015 Multiple Flash Authoring Heap Overflows - Malformed SWF Files mailing-list
- 31769 vdb-entry
- ADV-2008-2837 vdb-entry
- adobe-flash-cs3-bo(45914) vdb-entry