NetSight
IP …
critical9.3Public exploit code

CVE-2009-1868

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing.

Affected products

VendorProductAffected versions
AdobeAir
through 1.5.1
Versions 1.0, 1.01, 1.1, 1.5
AdobeFlash Player
through 10.0.22.87
Versions 7.0, 7.0.1, 7.0.25, 7.0.63, 7.0.69.0
AdobeFlex
Version 3.0

Weakness classification

CWE-119

References