Home

CVE-2009-3797

Description

Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.

Risk Information

Base Score
9.8
MODERATE
Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
4.349

Associated Vulnerability

VulnerabilityOS Platform
Upgrade Adobe Air 1.5.2 to latest versionWindows
Upgrade Adobe flash player 10.0.32.18 to latest versionWindows
Multiple vulnerabilities affected in Adobe AIR 1.5.2Windows
Multiple vulnerabilities affected in Adobe Flash Player Plugin 10.0.32.18Windows
Multiple vulnerabilities affected in Adobe Flash Player PPAPI 10.0.32.18Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.0Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.1Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.5.2Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.0.1Windows
Multiple Vulnerabilities are affected in Adobe AIR 1.5.1Windows
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.0Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.1Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.5.1Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.5.2Mac
Multiple Vulnerabilities are affected in Adobe AIR For Mac 1.0.1Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)
PATCH-601945Update for Adobe AIR For Mac (32.0.0.125) (Deployment-Only)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234