CVE-2007-3456

None

CVSS

—

EPSS

47.7%

Published

Jul 11, 2007

CISA due date

—

The record

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.

Affected packages

Ecosystem	Package	Fixed
Red Hat:rhel_extras:3	flash-plugin	0:9.0.48.0-1.el3.with.oss
Red Hat:rhel_extras:4	flash-plugin	0:9.0.48.0-1.el4
Red Hat:rhel_extras:5::client	flash-plugin	0:9.0.48.0-1.el5
Red Hat:rhel_extras:5::server	flash-plugin	0:9.0.48.0-1.el5

Related vulnerabilities

CVE-2010-2884 Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and… Also affects flash-plugin
CVE-2010-1297 Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before… Also affects flash-plugin
CVE-2009-3794 Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before… Also affects flash-plugin
CVE-2009-1869 Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe… Also affects flash-plugin
CVE-2009-1868 Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before… Also affects flash-plugin
CVE-2009-1862 Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash… Also affects flash-plugin
CVE-2009-0519 Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before… Also affects flash-plugin
CVE-2009-0520 Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly… Also affects flash-plugin