CVE-2008-4473

Adobe Flash CS3 Professional and Flash MX 2004 - Remote Code Execution via Long Control Parameters in SWF File

Title source: llm

Description

Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.

References (9)

Core 9

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/45914

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1021060

Vendor Advisory x_refsource_confirm

http://www.adobe.com/support/security/advisories/apsa08-09.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/31769

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/497397/100/0/threaded

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/2837

Various Sources x_refsource_misc

http://security-assessment.com/files/advisories/2008-10-16_Multiple_Flash_Authoring_Heap_Overflows.pdf

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32246

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/4429

Scores

EPSS 0.0868

EPSS Percentile 94.5%

Details

CWE

CWE-119

Status published

Products (2)

adobe/flash_player cs3

adobe/flash_player mx_2004

Published Oct 17, 2008

Tracked Since Feb 18, 2026