CVE-2009-1862
High · 7.8 CISA KEVCVSS
7.8
EPSS
21.2%
Published
Jul 23, 2009
CISA due date
Jun 22, 2022
The record
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:rhel_extras:3 | flash-plugin | 0 | 0:9.0.246.0-2.el3.with.oss |
| Red Hat:rhel_extras:4 | flash-plugin | 0 | 0:9.0.246.0-2.el4 |
| Red Hat:rhel_extras:5::client | flash-plugin | 0 | 0:10.0.32.18-2.el5 |
| Red Hat:rhel_extras:5::server | flash-plugin | 0 | 0:10.0.32.18-2.el5 |
Related vulnerabilities
- CVE-2010-2884 Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and… Also affects flash-plugin
- CVE-2010-1297 Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before… Also affects flash-plugin
- CVE-2009-3794 Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before… Also affects flash-plugin
- CVE-2009-1869 Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe… Also affects flash-plugin
- CVE-2009-1868 Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before… Also affects flash-plugin
- CVE-2009-0519 Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before… Also affects flash-plugin
- CVE-2009-0520 Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly… Also affects flash-plugin
- CVE-2008-5499 Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and… Also affects flash-plugin