NVD

Id
49135  
Name
CVE-2009-1869  
Description
Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-31  
Modified Date
2013-11-02  
Seq
2009-1869  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
248653 49135 CVE-2009-1869 APPLE-SA-2009-09-10-1  View
248654 49135 CVE-2009-1869 APPLE-SA-2009-09-10-2  View
248655 49135 CVE-2009-1869 oval:org.mitre.oval:def:15994  View
248656 49135 CVE-2009-1869 oval:org.mitre.oval:def:6998  View
248657 49135 CVE-2009-1869 http://roeehay.blogspot.com/2009/08/advisory-adobe-flash-player-avm2.html  View
248658 49135 CVE-2009-1869 http://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.html  View
248659 49135 CVE-2009-1869 GLSA-200908-04  View
248660 49135 CVE-2009-1869 266108  View
248661 49135 CVE-2009-1869 http://support.apple.com/kb/HT3864  View
248662 49135 CVE-2009-1869 http://support.apple.com/kb/HT3865  View
248663 49135 CVE-2009-1869 http://www.adobe.com/support/security/bulletins/apsb09-10.html  View
248664 49135 CVE-2009-1869 http://www.adobe.com/support/security/bulletins/apsb09-13.html  View
248665 49135 CVE-2009-1869 20090802 Advisory: Adobe Flash Player and AIR AVM2 intf_count Integer Overflow Remote Code Execution (CVE-2009-1869)  View
248666 49135 CVE-2009-1869 35890  View
248667 49135 CVE-2009-1869 35907  View
248668 49135 CVE-2009-1869 1022629  View
248669 49135 CVE-2009-1869 ADV-2009-2086  View
248670 49135 CVE-2009-1869 flash-air-code-execution(52181)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40959 JVNDB-2009-001965 Adobe Flash Player および Adobe AIR の AVM2 abcFile パーサにおける整数オーバーフローの脆弱性 Adobe Flash Player および Adobe AIR の ActionScript Virtual Machine 2 (AVM2) abcFile パーサには、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-1869 39300 CVE-2009-1869 49135 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001965.html 2009-07-30 2009-10-05 View