Home

CVE-2009-3794

Description

Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via crafted dimensions of JPEG data in an SWF file.

Risk Information

Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
21.245

Associated Vulnerability

VulnerabilityOS Platform
Upgrade Adobe Air 1.5.2 to latest versionWindows
Upgrade Adobe flash player 10.0.0.584 to latest versionWindows
Multiple vulnerabilities affected in Adobe AIR 1.5.2Windows
Multiple vulnerabilities affected in Adobe Flash Player Plugin 10.0.32.18Windows
Multiple vulnerabilities affected in Adobe Flash Player PPAPI 10.0.32.18Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.0Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.1Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.5.2Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.0.1Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.5.1Windows
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.0Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.1Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.5.1Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.5.2Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.0.1Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234