CVE-2009-0520: Buffer Overflow
A buffer overflow flaw was found in the Adobe Flash Player for Linux 10.0.12.36 that could allow attacker to execute arbitrary code on the user's system when crafted SWF file was opened by a victim.
Other sources
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Adobe Flash Playerto a version that resolves this vulnerability.Fixed in 9.0.159.0 - Upgrade
Upgrade
Adobe Flash Playerto a version that resolves this vulnerability.Fixed in 10.0.22.87
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0520?
CVE-2009-0520 is considered critical due to the potential for arbitrary code execution on affected systems.
How do I fix CVE-2009-0520?
To fix CVE-2009-0520, users should upgrade Adobe Flash Player to version 10.0.22.87 or later.
What platforms are affected by CVE-2009-0520?
CVE-2009-0520 affects Adobe Flash Player for Linux versions up to and including 10.0.12.36 and older versions of Adobe Flash Player.
What type of vulnerability is CVE-2009-0520?
CVE-2009-0520 is a buffer overflow vulnerability that can be exploited through specially crafted SWF files.
What products does CVE-2009-0520 impact?
CVE-2009-0520 impacts Adobe Flash Player and Adobe AIR on multiple versions and platforms.