CVE-2009-3798 — Out-of-bounds Write in Adobe AIR

CWE-39910 documents5 sources
Severity
9.3CRITICALNVD
EPSS
4.3%
top 11.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe AIRAdobe Flash Player
Timeline
PublishedDec 10
Latest updateMay 2

Description

Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages2 packages

▶NVDadobe/flash_player10.0.32.18+37
▶NVDadobe/adobe_air1.5.2+4

Patches

Patch: securitytracker.com ↗Patch: securitytracker.com ↗Patch: www.adobe.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-7gm5-vg78-248m: Adobe Flash Player before 10↗2022-05-02
▶
CVEList
CVE-2009-3798: Adobe Flash Player before 10↗2009-12-10
▶

📋Vendor Advisories

6
Red Hat
flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)↗2009-12-08
▶
Red Hat
flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)↗2009-12-08
▶
Red Hat
flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)↗2009-12-08
▶
Red Hat
flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)↗2009-12-08
▶
Red Hat
flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)↗2009-12-08
▶

💬Community

1
Bugzilla
flash-plugin: multiple code execution flaws (APSB09-19) (CVE-2009-3794, CVE-2009-3796, CVE-2009-3797, CVE-2009-3798, CVE-2009-3799, CVE-2009-3800)↗2009-12-03
▶
CVE-2009-3798 — Out-of-bounds Write in Adobe AIR | cvebase