CVE-2009-3799
Fixed in a distro release EPSS 10%
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."
Products: adobe_air, adobe flash_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 3 | flash-plugin | 0:9.0.260.0-1.el3.with.oss |
| Red Hat rhel extras 4 | flash-plugin | 0:9.0.260.0-1.el4 |
| Red Hat rhel extras 5 | flash-plugin | 0:10.0.42.34-1.el5 |