CVE-2007-3456

Published: Jul 11, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.

Affected (9)

Products: Adobe: Flash Player

Adobe

1 product

Flash Player

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Adobe Flash Player	Up to 9.0.45.0
Adobe Flash Player	Version 9.0.16
Adobe Flash Player	Version 9.0.18d60
Adobe Flash Player	Version 9.0.20.0
Adobe Flash Player	Version 9.0.20
Adobe Flash Player	Version 9.0.28.0
Adobe Flash Player	Version 9.0.28
Adobe Flash Player	Version 9.0.31.0
Adobe Flash Player	Version 9.0.31

Related CWEs

CWE-189

References (60)

http://docs.info.apple.com/article.html?artnum=307041

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html

Source: cve@mitre.org

http://osvdb.org/38054

Source: cve@mitre.org

http://secunia.com/advisories/26027

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/26057

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26118

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26357

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27643

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28068

Source: cve@mitre.org

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1

Source: cve@mitre.org

http://www.adobe.com/support/security/bulletins/apsb07-12.html

Source: cve@mitre.org

Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/730785

Source: cve@mitre.org

US Government Resource

http://www.mindedsecurity.com/labs/advisories/MSA01110707

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/473655/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/474163/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/474248/30/5760/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24856

Source: cve@mitre.org

http://www.securityfocus.com/bid/26444

Source: cve@mitre.org

http://www.securitytracker.com/id?1018359

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA07-192A.html

Source: cve@mitre.org

US Government Resource

http://www.us-cert.gov/cas/techalerts/TA07-319A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2007/2497

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/3868

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/4190

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/35337

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11493

Source: cve@mitre.org

https://rhn.redhat.com/errata/RHSA-2007-0696.html

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307041