CVE-2008-4473

high

Description

Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/45914

http://www.vupen.com/english/advisories/2008/2837

http://www.securityfocus.com/bid/31769

http://www.securityfocus.com/archive/1/497397/100/0/threaded

http://www.adobe.com/support/security/advisories/apsa08-09.html

http://securitytracker.com/id?1021060

http://securityreason.com/securityalert/4429

http://security-assessment.com/files/advisories/2008-10-16_Multiple_Flash_Authoring_Heap_Overflows.pdf

http://secunia.com/advisories/32246

Details

Source: Mitre, NVD

Published: 2008-10-17

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H