flash-plugin input validation flaw

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a 1 Long string or 2 XML variable type in a crafted a FLV or b SWF file, related to an "input validation error," including a signed comparison of values...

CVE-2004-1598

Adobe Acrobat and Acrobat Reader 6.0 allow remote attackers to read arbitrary files via a PDF file that contains an embedded Shockwave swf file that references files outside of the temporary directory...

CVE-2002-1881

Macromedia Flash Player 4.0 r12 through 6.0.47.0 allows remote attackers to cause a denial of service web browser crash via malformed content in a Flash Shockwave .SWF file, as demonstrated by by ROT13 encoding the body of the file but not the headers...