Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2007-3456

Опубликовано: 10 июл. 2007
Источник: redhat
EPSS Высокий

Описание

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.

Дополнительная информация

Статус:

Critical
Дефект:
CWE-20
https://bugzilla.redhat.com/show_bug.cgi?id=247530flash-plugin input validation flaw

EPSS

Процентиль: 99%
0.76622
Высокий

Связанные уязвимости

ubuntu
около 18 лет назад

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.

nvd
около 18 лет назад

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.

debian
около 18 лет назад

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allo ...

github
больше 3 лет назад

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.

EPSS

Процентиль: 99%
0.76622
Высокий