Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2009-3796
HistoryDec 10, 2009 - 7:30 p.m.

CVE-2009-3796

2009-12-1019:30:00
CWE-94
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.0%

JSON

Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors, related to a “data injection vulnerability.”

Affected configurations

NVD
Node
adobeadobe_airRange≤1.5.2
OR
adobeadobe_airMatch1.0
OR
adobeadobe_airMatch1.0.1
OR
adobeadobe_airMatch1.1
OR
adobeadobe_airMatch1.5.1
OR
adobeflash_playerRange≤10.0.32.18
OR
adobeflash_playerMatch7.0
OR
adobeflash_playerMatch7.0.1
OR
adobeflash_playerMatch7.0.25
OR
adobeflash_playerMatch7.0.63
OR
adobeflash_playerMatch7.0.69.0
OR
adobeflash_playerMatch7.0.70.0
OR
adobeflash_playerMatch7.1
OR
adobeflash_playerMatch7.1.1
OR
adobeflash_playerMatch7.2
OR
adobeflash_playerMatch8pro
OR
adobeflash_playerMatch8professional
OR
adobeflash_playerMatch8.0
OR
adobeflash_playerMatch8.0basic
OR
adobeflash_playerMatch8.0pro
OR
adobeflash_playerMatch8.0.24.0
OR
adobeflash_playerMatch8.0.34.0
OR
adobeflash_playerMatch8.0.35.0
OR
adobeflash_playerMatch8.0.39.0
OR
adobeflash_playerMatch9.0
OR
adobeflash_playerMatch9.0.16
OR
adobeflash_playerMatch9.0.18d60
OR
adobeflash_playerMatch9.0.20
OR
adobeflash_playerMatch9.0.20.0
OR
adobeflash_playerMatch9.0.28
OR
adobeflash_playerMatch9.0.28.0
OR
adobeflash_playerMatch9.0.31
OR
adobeflash_playerMatch9.0.31.0
OR
adobeflash_playerMatch9.0.45.0
OR
adobeflash_playerMatch9.0.47.0
OR
adobeflash_playerMatch9.0.112.0
OR
adobeflash_playerMatch9.0.114.0
OR
adobeflash_playerMatch9.0.115.0
OR
adobeflash_playerMatch9.0.124.0
OR
adobeflash_playerMatch9.0.155.0
OR
adobeflash_playerMatch9.0.159.0
OR
adobeflash_playerMatch9.125.0
OR
adobeflash_playerMatch10.0.0.584
OR
adobeflash_playerMatch10.0.12.10
OR
adobeflash_playerMatch10.0.12.36
OR
adobeflash_playerMatch10.0.22.87

References

Related

cve 1
ubuntucve 1
prion 1
cvelist 1
redhat 2
nessus 14
openvas 16
gentoo 1
securityvulns 2
suse 1
freebsd 1
threatpost 1
cve
cve
CVE-2009-3796
2009-12-10 19:30:00
ubuntucve
ubuntucve
CVE-2009-3796
2009-12-10 00:00:00
prion
prion
Design/Logic Flaw
2009-12-10 19:30:00
cvelist
cvelist
CVE-2009-3796
2009-12-10 19:00:00
redhat
redhat
(RHSA-2009:1658) Critical: flash-plugin security update
2009-12-09 00:00:00
(RHSA-2009:1657) Critical: flash-plugin security update
2009-12-09 00:00:00
nessus
nessus
RHEL 3 / 4 : flash-plugin (RHSA-2009:1658)
2013-01-24 00:00:00
Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)
2009-12-09 00:00:00
GLSA-201001-02 : Adobe Flash Player: Multiple vulnerabilities
2010-02-25 00:00:00
openvas
openvas
RedHat Security Advisory RHSA-2009:1657
2009-12-14 00:00:00
RedHat Security Advisory RHSA-2009:1658
2009-12-14 00:00:00
Gentoo Security Advisory GLSA 201001-02 (adobe-flash)
2010-01-07 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2010-01-03 00:00:00
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2009-12-09 00:00:00
ZDI-09-093: Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability
2009-12-09 00:00:00
suse
suse
remote code execution in flash-player
2009-12-22 15:16:01
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2009-07-14 00:00:00
threatpost
threatpost
Adobe Zaps Dangerous Flash Player Bugs
2009-12-09 03:23:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

79.0%

JSON
Related for NVD:CVE-2009-3796
cve1ubuntucve1prion1cvelist1redhat2nessus14openvas16gentoo1securityvulns2suse1freebsd1threatpost1