CVE-2008-1201: Code Injection

Published Mar 24, 2008

Updated

Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary code via a crafted .FLA file.

Affected Software

3 affected components

Adobe Flash=basic-8

Adobe Flash=professional-8

Adobe Flash=professional-cs3

Event History

Mar 24, 2008

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-1201?

CVE-2008-1201 is classified as a critical vulnerability that can allow remote code execution.

How do I fix CVE-2008-1201?

To mitigate CVE-2008-1201, users should update Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 to the latest version.

Which versions of Adobe Flash are affected by CVE-2008-1201?

CVE-2008-1201 affects Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8.

What kind of attack does CVE-2008-1201 facilitate?

CVE-2008-1201 allows user-assisted remote attackers to execute arbitrary code through crafted .FLA files.

Who can be targeted by attacks exploiting CVE-2008-1201?

End users of Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows are at risk from CVE-2008-1201.