Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3 Extras and 4 Extras.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

Multiple security flaws were found in the way Flash Player displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, possibly, execute arbitrary code when the victim loaded a page containing the specially crafted SWF content. (CVE-2009-3794, CVE-2009-3796, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)

All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 9.0.260.0.

An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 Supplementary.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in.

Multiple security flaws were found in the way Flash Player displayed certain SWF content. An attacker could use these flaws to create a specially crafted SWF file that would cause flash-plugin to crash or, possibly, execute arbitrary code when the victim loaded a page containing the specially crafted SWF content. (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)

All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 10.0.42.34.

Specially crafted Flash (SWF) files can cause overflows in flash-player. Attackers could potentially exploit that to execute arbitrary code. (CVE-2009-3794 / CVE-2009-3796 / CVE-2009-3797 / CVE-2009-3798 / CVE-2009-3799 / CVE-2009-3800 / CVE-2009-3951)

The remote host is affected by the vulnerability described in GLSA-201001-02 (Adobe Flash Player: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Adobe Flash Player:
    An anonymous researcher working with the Zero Day     Initiative reported that Adobe Flash Player does not properly process     JPEG files (CVE-2009-3794).
    Jim Cheng of EffectiveUI reported     an unspecified data injection vulnerability (CVE-2009-3796).
    Bing Liu of Fortinet's FortiGuard Labs reported multiple     unspecified memory corruption vulnerabilities (CVE-2009-3797,     CVE-2009-3798).
    Damian Put reported an integer overflow in the     Verifier::parseExceptionHandlers() function (CVE-2009-3799).
    Will Dormann of CERT reported multiple unspecified Denial of     Service vulnerabilities (CVE-2009-3800).
  Impact :

    A remote attacker could entice a user to open a specially crafted SWF     file, possibly resulting in the remote execution of arbitrary code with     the privileges of the user running the application, or a Denial of     Service via unknown vectors.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of Mac OS X 10.6 or 10.5 that does not have Security Update 2010-001 applied.

This security update contains fixes for the following products :

  - CoreAudio
  - CUPS
  - Flash Player plug-in
  - ImageIO
  - Image RAW
  - OpenSSL

Specially crafted Flash (SWF) files can cause overflows in flash-player. Attackers could potentially exploit that to execute arbitrary code (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798,CVE-2009-3799, CVE-2009-3800, CVE-2009-3951)

flash-player was upgraded to version 10 to fix those problems.

Specially crafted Flash (SWF) files can cause overflows in flash-player. Attackers could potentially exploit that to execute arbitrary code (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798,CVE-2009-3799, CVE-2009-3800, CVE-2009-3951)

Adobe Product Security Incident Response Team reports :

Critical vulnerabilities have been identified in Adobe Flash Player version 10.0.32.18 and earlier. These vulnerabilities could cause the application to crash and could potentially allow an attacker to take control of the affected system.

The remote Windows host contains a version of Adobe AIR player that is earlier than 1.5.3.  Such versions are reportedly affected by multiple vulnerabilities : 

  - A vulnerability in the parsing of JPEG data that could potentially lead to code execution. (CVE-2009-3794)

  - A data injection vulnerability that could potentially lead to code execution. (CVE-2009-3796)

  - A memory corruption vulnerability that could potentially lead to code execution. (CVE-2009-3797)

  - A memory corruption vulnerability that could potentially lead to code execution. (CVE-2009-3798)

  - An integer overflow vulnerability that could potentially lead to code execution. (CVE-2009-3799)

  - Multiple crash vulnerabilities that could potentially lead to code execution. (CVE-2009-3800)

  - A Windows-only local file name access vulnerability in the Flash Player ActiveX control that could potentially lead to information disclosure. (CVE-2009-3951)

The remote Windows host contains a version of Adobe AIR that is earlier than 1.5.3.  Such versions are potentially affected by multiple vulnerabilities :

  - A vulnerability in the parsing of JPEG data could lead     to code execution. (CVE-2009-3794)

  - A data injection vulnerability could lead to code     execution. (CVE-2009-3796)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2009-3797)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2009-3798)

  - An integer overflow vulnerability could lead to code     execution. (CVE-2009-3799) 

  - Multiple crash vulnerabilities could lead to code     execution. (CVE-2009-3800)

The remote Windows host contains a version of Adobe Flash Player that is earlier than 9.0.260 or 10.0.42.34.  Such versions are potentially affected by multiple vulnerabilities :

  - A vulnerability in the parsing of JPEG data could lead     to code execution. (CVE-2009-3794)

  - A data injection vulnerability could lead to code     execution. (CVE-2009-3796)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2009-3797)

  - A memory corruption vulnerability could lead to code     execution. (CVE-2009-3798)

  - An integer overflow vulnerability could lead to code     execution. (CVE-2009-3799) 

  - Multiple crash vulnerabilities could lead to code     execution. (CVE-2009-3800)

  - A Windows-only local file name access vulnerability     could lead to information disclosure. (CVE-2009-3591)

ID	Name	Product	Family	Severity
63908	RHEL 3 / 4 : flash-plugin (RHSA-2009:1658)	Nessus	Red Hat Local Security Checks	high
63907	RHEL 5 : flash-plugin (RHSA-2009:1657)	Nessus	Red Hat Local Security Checks	high
51733	SuSE 10 Security Update : flash-player (ZYPP Patch Number 6769)	Nessus	SuSE Local Security Checks	high
51732	SuSE 10 Security Update : flash-player (ZYPP Patch Number 6766)	Nessus	SuSE Local Security Checks	high
44891	GLSA-201001-02 : Adobe Flash Player: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high
44095	Mac OS X Multiple Vulnerabilities (Security Update 2010-001)	Nessus	MacOS X Local Security Checks	critical
43855	openSUSE Security Update : flash-player (flash-player-1769)	Nessus	SuSE Local Security Checks	high
43387	SuSE 11 Security Update : flash-player (SAT Patch Number 1698)	Nessus	SuSE Local Security Checks	high
43384	openSUSE Security Update : flash-player (flash-player-1707)	Nessus	SuSE Local Security Checks	high
43381	openSUSE Security Update : flash-player (flash-player-1707)	Nessus	SuSE Local Security Checks	high
43093	FreeBSD : linux-flashplugin -- multiple vulnerabilities (3c1a672e-e508-11de-9f4a-001b2134ef46)	Nessus	FreeBSD Local Security Checks	high
5256	Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)	Nessus Network Monitor	Web Clients	medium
43069	Adobe AIR < 1.5.3 Multiple Vulnerabilities (APSB09-19)	Nessus	Windows	high
43068	Flash Player < 9.0.260 / 10.0.42.34 Multiple Vulnerabilities (APSB09-19)	Nessus	Windows	high

Detections

Analytics

CVE-2009-3799

critical

Tenable Plugins

high

high

high

high

high

critical

high

high

high

high

high

medium

high

high