NVD

Id
52303  
Name
CVE-2007-0071  
Description
Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2008-04-09  
Modified Date
2011-03-07  
Seq
2007-0071  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
264218 52303 CVE-2007-0071 http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue.html  View
264219 52303 CVE-2007-0071 http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf  View
264220 52303 CVE-2007-0071 http://isc.sans.org/diary.html?storyid=4465  View
264221 52303 CVE-2007-0071 APPLE-SA-2008-05-28  View
264222 52303 CVE-2007-0071 SUSE-SA:2008:022  View
264223 52303 CVE-2007-0071 oval:org.mitre.oval:def:10379  View
264224 52303 CVE-2007-0071 238305  View
264225 52303 CVE-2007-0071 http://www.adobe.com/support/security/bulletins/apsb08-11.html  View
264226 52303 CVE-2007-0071 GLSA-200804-21  View
264227 52303 CVE-2007-0071 20080408 Adobe Flash Player Invalid Pointer Vulnerability  View
264228 52303 CVE-2007-0071 VU#159523  View
264229 52303 CVE-2007-0071 VU#395473  View
264230 52303 CVE-2007-0071 http://www.matasano.com/log/1032/this-new-vulnerability-dowds-inhuman-flash-exploit/  View
264231 52303 CVE-2007-0071 RHSA-2008:0221  View
264232 52303 CVE-2007-0071 28695  View
264233 52303 CVE-2007-0071 29386  View
264234 52303 CVE-2007-0071 1019811  View
264235 52303 CVE-2007-0071 TA08-100A  View
264236 52303 CVE-2007-0071 TA08-149A  View
264237 52303 CVE-2007-0071 TA08-150A  View
264238 52303 CVE-2007-0071 ADV-2008-1662  View
264239 52303 CVE-2007-0071 ADV-2008-1697  View
264240 52303 CVE-2007-0071 ADV-2008-1724  View
264241 52303 CVE-2007-0071 http://www.zerodayinitiative.com/advisories/ZDI-08-032/  View
264242 52303 CVE-2007-0071 multimedia-file-integer-overflow(37277)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45974 JVNDB-2008-001284 Adobe Flash Player における整数オーバーフローの脆弱性 Adobe Flash Player には、SWF ファイルの Scene Count 値が負の値である場合の処理に不備があり、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-0071 23426 CVE-2007-0071 52303 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001284.html 2008-04-08 2008-06-18 View