CVE-2008-4473

Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.

Link	Resource
http://security-assessment.com/files/advisories/2008-10-16_Multiple_Flash_Authoring_Heap_Overflows.pdf
http://secunia.com/advisories/32246	Vendor Advisory
http://securitytracker.com/id?1021060
http://www.adobe.com/support/security/advisories/apsa08-09.html	Vendor Advisory
http://www.securityfocus.com/bid/31769
http://securityreason.com/securityalert/4429
http://www.vupen.com/english/advisories/2008/2837
https://exchange.xforce.ibmcloud.com/vulnerabilities/45914
http://www.securityfocus.com/archive/1/497397/100/0/threaded

Configuration 1

cpe:2.3:a:adobe:flash_player:mx_2004:*:*:*:*:*:*:*

---

Published : 2008-10-17 07:31

Updated : 2018-10-11 08:51

---

NVD link : CVE-2008-4473

Mitre link : CVE-2008-4473

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer