CVE-2009-0519

2009-02-2616:17:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2009-0519

adobe flash player

remote attack

denial of service

arbitrary code execution

.swf

nvd

7.6 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.269 Low

EPSS

Percentile

96.7%

JSON

Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a crafted Shockwave Flash (aka .swf) file.

CPENameOperatorVersion
adobe:flash_playeradobe flash playereq9.0.48.0
adobe:flash_playeradobe flash playereq8.0.24.0
adobe:flash_player_for_linuxadobe flash player for linuxle10.0.15.3
adobe:airadobe aireq1.5
adobe:flash_playeradobe flash playereq7.1.1
adobe:flash_playeradobe flash playereq9.0.124.0
adobe:flash_playeradobe flash playereq9.0.47.0
adobe:flash_playeradobe flash playereq7.0.63
adobe:flash_playeradobe flash playereq7.0.70.0
adobe:flash_playeradobe flash playereq8.0.35.0

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	eq	9.0.48.0
adobe:flash_player	adobe flash player	eq	8.0.24.0
adobe:flash_player_for_linux	adobe flash player for linux	le	10.0.15.3
adobe:air	adobe air	eq	1.5
adobe:flash_player	adobe flash player	eq	7.1.1
adobe:flash_player	adobe flash player	eq	9.0.124.0
adobe:flash_player	adobe flash player	eq	9.0.47.0
adobe:flash_player	adobe flash player	eq	7.0.63
adobe:flash_player	adobe flash player	eq	7.0.70.0
adobe:flash_player	adobe flash player	eq	8.0.35.0