CVE-2009-3799

2009-12-1000:00:00

ubuntu.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.213 Low

EPSS

Percentile

96.4%

JSON

Integer overflow in the Verifier::parseExceptionHandlers function in Adobe
Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote
attackers to execute arbitrary code via an SWF file with a large
exception_count value that triggers memory corruption, related to
“generation of ActionScript exception handlers.”

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchflashplugin-nonfree< 0.0.1.218+really9.0.260.0ubuntu1UNKNOWN
ubuntu8.10noarchflashplugin-nonfree< 10.0.42.34ubuntu0.8.10.1UNKNOWN
ubuntu9.04noarchflashplugin-nonfree< 10.0.42.34ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchflashplugin-nonfree< 10.0.42.34ubuntu0.9.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	flashplugin-nonfree	< 0.0.1.218+really9.0.260.0ubuntu1	UNKNOWN
ubuntu	8.10	noarch	flashplugin-nonfree	< 10.0.42.34ubuntu0.8.10.1	UNKNOWN
ubuntu	9.04	noarch	flashplugin-nonfree	< 10.0.42.34ubuntu0.9.04.1	UNKNOWN
ubuntu	9.10	noarch	flashplugin-nonfree	< 10.0.42.34ubuntu0.9.10.1	UNKNOWN