NetSight
IP …
critical9.3Public exploit code

CVE-2007-3456

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long stri…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.

Affected products

VendorProductAffected versions
AdobeFlash Player
through 9.0.45.0
Versions 9.0.16, 9.0.18d60, 9.0.20, 9.0.20.0, 9.0.28

Weakness classification

CWE-189

References