Adobe : Security Vulnerabilities, CVEs, Published In July 2009 (Code Execution)
Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.
Max CVSS
9.3
EPSS Score
47.75%
Published
2009-07-31
Updated
2018-10-10
Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing.
Max CVSS
9.3
EPSS Score
0.69%
Published
2009-07-31
Updated
2017-09-29
Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.
Max CVSS
9.3
EPSS Score
0.54%
Published
2009-07-31
Updated
2017-09-29
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a "null pointer vulnerability."
Max CVSS
9.3
EPSS Score
0.57%
Published
2009-07-31
Updated
2017-09-29
Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.
Max CVSS
9.3
EPSS Score
0.54%
Published
2009-07-31
Updated
2017-09-29
Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to a "privilege escalation vulnerability."
Max CVSS
9.3
EPSS Score
0.63%
Published
2009-07-31
Updated
2017-09-29
CVE-2009-1862
Known exploited
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.
Max CVSS
9.3
EPSS Score
33.38%
Published
2009-07-23
Updated
2009-09-16
CISA KEV Added
2022-06-08
7 vulnerabilities found