CVE-2007-0071
Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow.
- EPSS
- 93% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-189
- Published
- Modified
- Record from
- the NVD, synced
Affected
- adobe:flash_player
References
- http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue.html
- http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf
- http://isc.sans.org/diary.html?storyid=4465
- http://lists.apple.com/archives/security-announce/2008//May/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html