CVE-2009-3797: Critical severity adobe vulnerability
Published Dec 8, 2009
·Updated
Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
Affected Software
11 affected componentsFixes available
redhat/flash-plugin<0:10.0.42.34-1.el5
0:10.0.42.34-1.el5
Adobe Adobe AIR=1.0
Adobe Adobe AIR=1.5.1
Adobe Flash Player=10.0.12.36
Adobe Flash Player=10.0.0.584
Adobe Flash Player=10.0.22.87
Adobe Flash Player=10.0.32.18
Adobe Adobe AIR<=1.5.2
Adobe Adobe AIR=1.0.1
Adobe Adobe AIR=1.1
Adobe Flash Player=10.0.12.10
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Dec 8, 2009
CVE Published
via Red Hat·12:00 AM
Dec 10, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-3797?
CVE-2009-3797 has a critical severity level due to its potential for allowing attackers to execute arbitrary code.
2
How do I fix CVE-2009-3797?
To fix CVE-2009-3797, upgrade Adobe Flash Player to version 10.0.42.34 or later, and Adobe AIR to version 1.5.3 or later.
3
Which versions are affected by CVE-2009-3797?
CVE-2009-3797 affects Adobe Flash Player versions before 10.0.42.34 and Adobe AIR versions before 1.5.3.
4
What type of vulnerability is CVE-2009-3797?
CVE-2009-3797 is a memory corruption vulnerability that can be exploited to execute arbitrary code.
5
Who is affected by CVE-2009-3797?
Users of Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 are at risk from CVE-2009-3797.