NetSight
IP …
critical9.3Public exploit code

CVE-2009-1869

Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR b…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.

Affected products

VendorProductAffected versions
AdobeAir
through 1.5.1
Versions 1.0, 1.01, 1.1, 1.5
AdobeFlash Player
through 10.0.22.87
Versions 7.0, 7.0.1, 7.0.25, 7.0.63, 7.0.69.0
AdobeFlex
Version 3.0

Weakness classification

CWE-189

References