CVE-2009-0520

2009-02-2600:00:00

ubuntu.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.41 Medium

EPSS

Percentile

97.3%

JSON

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not
properly remove references to destroyed objects during Shockwave Flash file
processing, which allows remote attackers to execute arbitrary code via a
crafted file, related to a “buffer overflow issue.”

Bugs

<https://bugs.launchpad.net/ubuntu/+source/flashplugin-nonfree/+bug/334134>

OSVersionArchitecturePackageVersionFilename
ubuntu7.10noarchadobe-flashplugin< 10.0.22.87-0gutsy3UNKNOWN
ubuntu8.04noarchadobe-flashplugin< 10.0.22.87-2UNKNOWN
ubuntu8.10noarchadobe-flashplugin< 10.0.22.87-2intrepid1UNKNOWN
ubuntu7.10noarchflashplugin-nonfree< 9.0.159.0ubuntu1~gutsy1UNKNOWN
ubuntu8.04noarchflashplugin-nonfree< 9.0.159.0ubuntu1~hardy1UNKNOWN
ubuntu8.10noarchflashplugin-nonfree< 10.0.22.87ubuntu1~intrepid1UNKNOWN
ubuntu9.04noarchflashplugin-nonfree< 10.0.22.87ubuntu1UNKNOWN
ubuntu9.10noarchflashplugin-nonfree< 10.0.22.87ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	7.10	noarch	adobe-flashplugin	< 10.0.22.87-0gutsy3	UNKNOWN
ubuntu	8.04	noarch	adobe-flashplugin	< 10.0.22.87-2	UNKNOWN
ubuntu	8.10	noarch	adobe-flashplugin	< 10.0.22.87-2intrepid1	UNKNOWN
ubuntu	7.10	noarch	flashplugin-nonfree	< 9.0.159.0ubuntu1~gutsy1	UNKNOWN
ubuntu	8.04	noarch	flashplugin-nonfree	< 9.0.159.0ubuntu1~hardy1	UNKNOWN
ubuntu	8.10	noarch	flashplugin-nonfree	< 10.0.22.87ubuntu1~intrepid1	UNKNOWN
ubuntu	9.04	noarch	flashplugin-nonfree	< 10.0.22.87ubuntu1	UNKNOWN
ubuntu	9.10	noarch	flashplugin-nonfree	< 10.0.22.87ubuntu1	UNKNOWN