|
Adobe Flash Player Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA37584
|
|
|
Release Date:
|
2009-12-09
|
|
Popularity:
|
1,579 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Exposure of system information
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Adobe AIR 1.x
Adobe Flash Player 10.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Some vulnerabilities have been reported in Adobe Flash Player / AIR, which can be exploited by malicious people to gain knowledge of system information or compromise a user's system.
1) An error when parsing JPEG dimensions contained within an SWF file can be exploited to cause a heap-based buffer overflow.
2) An unspecified error may allow injection of data and potentially lead to execution of arbitrary code.
3) An unspecified error possibly related to "getProperty()" can be exploited to corrupt memory and may allow execution of arbitrary code.
4) An unspecified error can be exploited to corrupt memory and may allow execution of arbitrary code.
5) An integer overflow error when generating ActionScript exception handlers in Verifier::parseExceptionHandlers() can be exploited to corrupt memory.
6) Various unspecified errors may potentially allow execution of arbitrary code.
7) An error may disclose information about local file names.
The vulnerabilities are reported in Adobe Flash Player version 10.0.32.18 and prior and Adobe AIR version 1.5.2 and prior.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
