NVD

Id
55608  
Name
CVE-2007-3456  
Description
Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-07-11  
Modified Date
2012-10-30  
Seq
2007-3456  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
282705 55608 CVE-2007-3456 http://docs.info.apple.com/article.html?artnum=307041  View
282706 55608 CVE-2007-3456 APPLE-SA-2007-11-14  View
282707 55608 CVE-2007-3456 oval:org.mitre.oval:def:11493  View
282708 55608 CVE-2007-3456 103167  View
282709 55608 CVE-2007-3456 201506  View
282710 55608 CVE-2007-3456 http://www.adobe.com/support/security/bulletins/apsb07-12.html  View
282711 55608 CVE-2007-3456 GLSA-200708-01  View
282712 55608 CVE-2007-3456 VU#730785  View
282713 55608 CVE-2007-3456 http://www.mindedsecurity.com/labs/advisories/MSA01110707  View
282714 55608 CVE-2007-3456 SUSE-SA:2007:046  View
282715 55608 CVE-2007-3456 20070713 [MSA01110707] Flash Player/Plugin Video file parsing Remote CodeExecution  View
282716 55608 CVE-2007-3456 20070719 Wii"s Internet Channel affected to Flash FLV parser vulnerability  View
282717 55608 CVE-2007-3456 20070720 FLEA-2007-0032-1: flashplayer  View
282718 55608 CVE-2007-3456 24856  View
282719 55608 CVE-2007-3456 26444  View
282720 55608 CVE-2007-3456 1018359  View
282721 55608 CVE-2007-3456 TA07-192A  View
282722 55608 CVE-2007-3456 TA07-319A  View
282723 55608 CVE-2007-3456 ADV-2007-2497  View
282724 55608 CVE-2007-3456 ADV-2007-3868  View
282725 55608 CVE-2007-3456 ADV-2007-4190  View
282726 55608 CVE-2007-3456 flashplayer-swf-code-execution(35337)  View
282727 55608 CVE-2007-3456 RHSA-2007:0696  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51846 JVNDB-2007-000509 Adobe Flash Player における入力検証エラーに関する脆弱性 Adobe Flash Player には、入力された値のチェックに不備が存在するために、不正な SWF ファイルを処理することで、任意のコードを実行される脆弱性が存在します。 CVE-2007-3456 26811 CVE-2007-3456 55608 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000509.html 2007-07-10 2007-12-21 View