Vulnerability in Adobe Air
CVE-2009-3797
Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
EPSS: 0.063 (92.8th percentile) — read the EPSS interpretation.
Affected products
- Adobe Adobe_air — versions 1.0, 1.0.1, 1.1
- Adobe Flash_player — versions 10.0.0.584, 10.0.12.10, 10.0.12.36
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@adobe.com (x_refsource_REDHAT, vendor-advisory, Patch)
- psirt@adobe.com (Patch, vdb-entry, x_refsource_SECTRACK)
- psirt@adobe.com (x_refsource_CONFIRM)
- psirt@adobe.com (vendor-advisory, x_refsource_SUNALERT)
- psirt@adobe.com (vendor-advisory, x_refsource_APPLE)
- psirt@adobe.com (Patch, vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- psirt@adobe.com (vendor-advisory, x_refsource_SUSE)
- psirt@adobe.com (x_refsource_CONFIRM, Patch)
- psirt@adobe.com (vdb-entry, x_refsource_XF)
- psirt@adobe.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)