Vulnerability in N/a

CVE-2007-3456

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an…

EPSS: 0.633 (98.4th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

References

  • 28068 (x_refsource_SECUNIA, third-party-advisory)
  • 1018359 (vdb-entry, x_refsource_SECTRACK)
  • RHSA-2007:0696 (x_refsource_REDHAT, vendor-advisory)
  • 26357 (x_refsource_SECUNIA, third-party-advisory)
  • SUSE-SA:2007:046 (vendor-advisory, x_refsource_SUSE)
  • 201506 (vendor-advisory, x_refsource_SUNALERT)
  • 38054 (x_refsource_OSVDB, vdb-entry)
  • ADV-2007-4190 (vdb-entry, x_refsource_VUPEN)
  • 26444 (vdb-entry, x_refsource_BID)
  • GLSA-200708-01 (vendor-advisory, x_refsource_GENTOO)