CVE-2009-1869 : Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in

Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.

Published 2009-07-31 19:30:00

Updated 2018-10-10 19:38:28

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute codeDenial of service

Products affected by CVE-2009-1869

Adobe » Flash Player
Versions up to, including, (<=) 10.0.22.87
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0.24.0
cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.28
cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.20
cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.25
cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0
cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.28.0
cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.20.0
cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.31.0
cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.16
cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.1
cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.47.0
cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.48.0
cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.63
cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.69.0
cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.70.0
cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0.34.0
cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.112.0
cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0
cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.1.1
cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.2
cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0 Basic Edition
cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0 PRO Edition
cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.45.0
cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.1
cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0.35.0
cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 8.0.39.0
cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.114.0
cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.124.0
cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 9.0.115.0
cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 7.0.63 Linux Edition
cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.0.12.10
cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.0.0.584
cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*
Matching versions
Adobe » Flash Player » Version: 10.0.12.36
cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*
Matching versions
Adobe » AIR
Versions up to, including, (<=) 1.5.1
cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
Matching versions
Adobe » AIR » Version: 1.0
cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:*
Matching versions
Adobe » AIR » Version: 1.5
cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:*
Matching versions
Adobe » AIR » Version: 1.01
cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*
Matching versions
Adobe » AIR » Version: 1.1
cpe:2.3:a:adobe:air:1.1:*:*:*:*:*:*:*
Matching versions
Adobe » Flex » Version: 3.0
cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2009-1869

EPSS FAQ

47.75%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 97 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2009-1869

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2009-1869

CWE-189

Assigned by: nvd@nist.gov (Primary)

References for CVE-2009-1869

Jump to

Vulnerability Details : CVE-2009-1869

Products affected by CVE-2009-1869

Exploit prediction scoring system (EPSS) score for CVE-2009-1869

CVSS scores for CVE-2009-1869

CWE ids for CVE-2009-1869

References for CVE-2009-1869