CVE-2009-1869
adobe: no CVSS score yet. EPSS 20% chance of exploitation in the next 30 days.
Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.
- EPSS
- 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CWE
- CWE-189
- Published
- Modified
- Record from
- the NVD, synced
Affected
- adobe:air
- adobe:flash_player
- adobe:flex
References
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html
- http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html
- http://osvdb.org/56777
- http://roeehay.blogspot.com/2009/08/advisory-adobe-flash-player-avm2.html
- http://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.html