Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-3794
HistoryDec 10, 2009 - 7:30 p.m.

CVE-2009-3794

2009-12-1019:30:00
CWE-119
[email protected]
web.nvd.nist.gov
1

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.649 Medium

EPSS

Percentile

97.9%

JSON

Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via crafted dimensions of JPEG data in an SWF file.

Affected configurations

NVD
Node
adobeadobe_airRange≀1.5.2
OR
adobeadobe_airMatch1.0
OR
adobeadobe_airMatch1.0.1
OR
adobeadobe_airMatch1.1
OR
adobeadobe_airMatch1.5.1
OR
adobeflash_playerRange≀10.0.32.18
OR
adobeflash_playerMatch7.0
OR
adobeflash_playerMatch7.0.1
OR
adobeflash_playerMatch7.0.25
OR
adobeflash_playerMatch7.0.63
OR
adobeflash_playerMatch7.0.69.0
OR
adobeflash_playerMatch7.0.70.0
OR
adobeflash_playerMatch7.1
OR
adobeflash_playerMatch7.1.1
OR
adobeflash_playerMatch7.2
OR
adobeflash_playerMatch8pro
OR
adobeflash_playerMatch8professional
OR
adobeflash_playerMatch8.0
OR
adobeflash_playerMatch8.0basic
OR
adobeflash_playerMatch8.0pro
OR
adobeflash_playerMatch8.0.24.0
OR
adobeflash_playerMatch8.0.34.0
OR
adobeflash_playerMatch8.0.35.0
OR
adobeflash_playerMatch8.0.39.0
OR
adobeflash_playerMatch9.0
OR
adobeflash_playerMatch9.0.16
OR
adobeflash_playerMatch9.0.18d60
OR
adobeflash_playerMatch9.0.20
OR
adobeflash_playerMatch9.0.20.0
OR
adobeflash_playerMatch9.0.28
OR
adobeflash_playerMatch9.0.28.0
OR
adobeflash_playerMatch9.0.31
OR
adobeflash_playerMatch9.0.31.0
OR
adobeflash_playerMatch9.0.45.0
OR
adobeflash_playerMatch9.0.47.0
OR
adobeflash_playerMatch9.0.112.0
OR
adobeflash_playerMatch9.0.114.0
OR
adobeflash_playerMatch9.0.115.0
OR
adobeflash_playerMatch9.0.124.0
OR
adobeflash_playerMatch9.0.155.0
OR
adobeflash_playerMatch9.0.159.0
OR
adobeflash_playerMatch9.125.0
OR
adobeflash_playerMatch10.0.0.584
OR
adobeflash_playerMatch10.0.12.10
OR
adobeflash_playerMatch10.0.12.36
OR
adobeflash_playerMatch10.0.22.87

References

Related

prion 1
seebug 1
cve 1
cvelist 1
checkpoint_advisories 1
securityvulns 3
zdi 1
ubuntucve 1
redhat 2
nessus 14
openvas 16
gentoo 1
suse 1
freebsd 1
threatpost 1
prion
prion
Heap overflow
2009-12-10 19:30:00
seebug
seebug
Adobe Flash Player JPEGθ§£ζžε †ζΊ’ε‡ΊζΌζ΄ž
2009-12-12 00:00:00
cve
cve
CVE-2009-3794
2009-12-10 19:30:00
cvelist
cvelist
CVE-2009-3794
2009-12-10 19:00:00
checkpoint_advisories
checkpoint_advisories
Adobe Flash Player JPEG Dimensions Data Parsing Heap Overflow (APSB09-19; CVE-2009-3794)
2009-12-09 00:00:00
securityvulns
securityvulns
ZDI-09-092: Adobe Flash Player JPEG Parsing Heap Overflow Vulnerability
2009-12-09 00:00:00
Adobe Flash Player multiple security vulnerabilities
2009-12-09 00:00:00
ZDI-09-093: Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability
2009-12-09 00:00:00
zdi
zdi
Adobe Flash Player JPEG Parsing Heap Overflow Vulnerability
2009-12-09 00:00:00
ubuntucve
ubuntucve
CVE-2009-3794
2009-12-10 00:00:00
redhat
redhat
(RHSA-2009:1658) Critical: flash-plugin security update
2009-12-09 00:00:00
(RHSA-2009:1657) Critical: flash-plugin security update
2009-12-09 00:00:00
nessus
nessus
RHEL 3 / 4 : flash-plugin (RHSA-2009:1658)
2013-01-24 00:00:00
Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)
2009-12-09 00:00:00
GLSA-201001-02 : Adobe Flash Player: Multiple vulnerabilities
2010-02-25 00:00:00
openvas
openvas
RedHat Security Advisory RHSA-2009:1657
2009-12-14 00:00:00
RedHat Security Advisory RHSA-2009:1658
2009-12-14 00:00:00
Gentoo Security Advisory GLSA 201001-02 (adobe-flash)
2010-01-07 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2010-01-03 00:00:00
suse
suse
remote code execution in flash-player
2009-12-22 15:16:01
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2009-07-14 00:00:00
threatpost
threatpost
Adobe Zaps Dangerous Flash Player Bugs
2009-12-09 03:23:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.649 Medium

EPSS

Percentile

97.9%

JSON
Related for NVD:CVE-2009-3794
prion1seebug1cve1cvelist1checkpoint_advisories1securityvulns3zdi1ubuntucve1redhat2nessus14openvas16gentoo1suse1freebsd1threatpost1