CVE-2009-0520
NoneCVSS
—
EPSS
28.5%
Published
Feb 26, 2009
CISA due date
—
The record
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:rhel_extras:3 | flash-plugin | 0 | 0:9.0.159.0-1.el3.with.oss |
| Red Hat:rhel_extras:4 | flash-plugin | 0 | 0:9.0.159.0-1.el4 |
| Red Hat:rhel_extras:5::client | flash-plugin | 0 | 0:10.0.22.87-1.el5 |
| Red Hat:rhel_extras:5::server | flash-plugin | 0 | 0:10.0.22.87-1.el5 |
Related vulnerabilities
- CVE-2010-2884 Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and… Also affects flash-plugin
- CVE-2010-1297 Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before… Also affects flash-plugin
- CVE-2009-3794 Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before… Also affects flash-plugin
- CVE-2009-1869 Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe… Also affects flash-plugin
- CVE-2009-1868 Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before… Also affects flash-plugin
- CVE-2009-1862 Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash… Also affects flash-plugin
- CVE-2009-0519 Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before… Also affects flash-plugin
- CVE-2008-5499 Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and… Also affects flash-plugin