Vulnerability-Lookup

RHSA-2009_1189

Vulnerability from csaf_redhat - Published: 2009-07-31 14:16 - Updated: 2024-11-14 10:46

Summary

Red Hat Security Advisory: flash-plugin security update

Severity

Critical

Notes

Topic: An updated Adobe Flash Player package that fixes multiple security issues is now available for Red Hat Enterprise Linux 3 and 4 Extras. This update has been rated as having critical security impact by the Red Hat Security Response Team.

Details: The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash Player web browser plug-in. Multiple security flaws were found in the way Flash Player displayed certain SWF content. An attacker could use these flaws to create a specially-crafted SWF file that would cause flash-plugin to crash or, possibly, execute arbitrary code when the victim loaded a page containing the specially-crafted SWF content. (CVE-2009-1862, CVE-2009-1863, CVE-2009-1864, CVE-2009-1865, CVE-2009-1866, CVE-2009-1868, CVE-2009-1869) A clickjacking flaw was discovered in Flash Player. A specially-crafted SWF file could trick a user into unintentionally or mistakenly clicking a link or a dialog. (CVE-2009-1867) A flaw was found in the Flash Player local sandbox. A specially-crafted SWF file could cause information disclosure when it was saved to the hard drive. (CVE-2009-1870) All users of Adobe Flash Player should install this updated package, which upgrades Flash Player to version 9.0.246.0.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2009-1862

Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.

6.8 ()


                        
                          AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix

Threats

Exploit Status CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

Impact Critical

CVE-2009-1863

Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to a "privilege escalation vulnerability."

6.8 ()


                        
                          AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix

Threats

Impact Critical

CVE-2009-1864

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.

6.8 ()


                        
                          AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix

Threats

Impact Critical

CVE-2009-1865

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a "null pointer vulnerability."

6.8 ()


                        
                          AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix

Threats

Impact Critical

CVE-2009-1866

Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.

6.8 ()


                        
                          AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix

Threats

Impact Critical

CVE-2009-1867

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "clickjacking vulnerability."

5.8 ()


                        
                          AV:N/AC:M/Au:N/C:P/I:P/A:N

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix

Threats

Impact Moderate

CVE-2009-1868

6.8 ()


                        
                          AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix

Threats

Impact Critical

CVE-2009-1869

Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.

6.8 ()


                        
                          AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix

Threats

Impact Critical

CVE-2009-1870

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a "local sandbox vulnerability."

5.8 ()


                        
                          AV:N/AC:M/Au:N/C:P/I:P/A:N

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386	—	Vendor Fix fix
Unresolved product id: 4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix
Unresolved product id: 4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386	—	Vendor Fix fix

Threats

Impact Moderate

References

38 references

URL	Category
https://access.redhat.com/errata/RHSA-2009:1189	self
https://access.redhat.com/security/updates/classi…	external
http://www.adobe.com/support/security/bulletins/a…	external
https://bugzilla.redhat.com/show_bug.cgi?id=513362	external
https://bugzilla.redhat.com/show_bug.cgi?id=514874	external
https://bugzilla.redhat.com/show_bug.cgi?id=514877	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2009-1862	self
https://bugzilla.redhat.com/show_bug.cgi?id=513362	external
https://www.cve.org/CVERecord?id=CVE-2009-1862	external
https://nvd.nist.gov/vuln/detail/CVE-2009-1862	external
https://www.cisa.gov/known-exploited-vulnerabilit…	external
https://access.redhat.com/security/cve/CVE-2009-1863	self
https://bugzilla.redhat.com/show_bug.cgi?id=514874	external
https://www.cve.org/CVERecord?id=CVE-2009-1863	external
https://nvd.nist.gov/vuln/detail/CVE-2009-1863	external
https://access.redhat.com/security/cve/CVE-2009-1864	self
https://www.cve.org/CVERecord?id=CVE-2009-1864	external
https://nvd.nist.gov/vuln/detail/CVE-2009-1864	external
https://access.redhat.com/security/cve/CVE-2009-1865	self
https://www.cve.org/CVERecord?id=CVE-2009-1865	external
https://nvd.nist.gov/vuln/detail/CVE-2009-1865	external
https://access.redhat.com/security/cve/CVE-2009-1866	self
https://www.cve.org/CVERecord?id=CVE-2009-1866	external
https://nvd.nist.gov/vuln/detail/CVE-2009-1866	external
https://access.redhat.com/security/cve/CVE-2009-1867	self
https://bugzilla.redhat.com/show_bug.cgi?id=514877	external
https://www.cve.org/CVERecord?id=CVE-2009-1867	external
https://nvd.nist.gov/vuln/detail/CVE-2009-1867	external
https://access.redhat.com/security/cve/CVE-2009-1868	self
https://www.cve.org/CVERecord?id=CVE-2009-1868	external
https://nvd.nist.gov/vuln/detail/CVE-2009-1868	external
https://access.redhat.com/security/cve/CVE-2009-1869	self
https://www.cve.org/CVERecord?id=CVE-2009-1869	external
https://nvd.nist.gov/vuln/detail/CVE-2009-1869	external
https://access.redhat.com/security/cve/CVE-2009-1870	self
https://www.cve.org/CVERecord?id=CVE-2009-1870	external
https://nvd.nist.gov/vuln/detail/CVE-2009-1870	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An updated Adobe Flash Player package that fixes multiple security issues\nis now available for Red Hat Enterprise Linux 3 and 4 Extras.\n\nThis update has been rated as having critical security impact by the Red\nHat Security Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The flash-plugin package contains a Mozilla Firefox compatible Adobe Flash\nPlayer web browser plug-in.\n\nMultiple security flaws were found in the way Flash Player displayed\ncertain SWF content. An attacker could use these flaws to create a\nspecially-crafted SWF file that would cause flash-plugin to crash or,\npossibly, execute arbitrary code when the victim loaded a page containing\nthe specially-crafted SWF content. (CVE-2009-1862, CVE-2009-1863,\nCVE-2009-1864, CVE-2009-1865, CVE-2009-1866, CVE-2009-1868, CVE-2009-1869)\n\nA clickjacking flaw was discovered in Flash Player. A specially-crafted\nSWF file could trick a user into unintentionally or mistakenly clicking a\nlink or a dialog. (CVE-2009-1867)\n\nA flaw was found in the Flash Player local sandbox. A specially-crafted\nSWF file could cause information disclosure when it was saved to the hard\ndrive. (CVE-2009-1870)\n\nAll users of Adobe Flash Player should install this updated package, which\nupgrades Flash Player to version 9.0.246.0.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2009:1189",
        "url": "https://access.redhat.com/errata/RHSA-2009:1189"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#critical",
        "url": "https://access.redhat.com/security/updates/classification/#critical"
      },
      {
        "category": "external",
        "summary": "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
        "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
      },
      {
        "category": "external",
        "summary": "513362",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513362"
      },
      {
        "category": "external",
        "summary": "514874",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=514874"
      },
      {
        "category": "external",
        "summary": "514877",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=514877"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1189.json"
      }
    ],
    "title": "Red Hat Security Advisory: flash-plugin security update",
    "tracking": {
      "current_release_date": "2024-11-14T10:46:39+00:00",
      "generator": {
        "date": "2024-11-14T10:46:39+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.0"
        }
      },
      "id": "RHSA-2009:1189",
      "initial_release_date": "2009-07-31T14:16:00+00:00",
      "revision_history": [
        {
          "date": "2009-07-31T14:16:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2009-07-31T10:16:59+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-14T10:46:39+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 3 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 3 Extras",
                  "product_id": "3AS-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Desktop version 3 Extras",
                "product": {
                  "name": "Red Hat Desktop version 3 Extras",
                  "product_id": "3Desktop-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 3 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 3 Extras",
                  "product_id": "3ES-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 3 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 3 Extras",
                  "product_id": "3WS-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS version 4 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux AS version 4 Extras",
                  "product_id": "4AS-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Desktop version 4 Extras",
                "product": {
                  "name": "Red Hat Desktop version 4 Extras",
                  "product_id": "4Desktop-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 4 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 4 Extras",
                  "product_id": "4ES-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 4 Extras",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 4 Extras",
                  "product_id": "4WS-LACD",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_extras:4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux Supplementary"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
                "product": {
                  "name": "flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
                  "product_id": "flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flash-plugin@9.0.246.0-2.el3.with.oss?arch=i386"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "flash-plugin-0:9.0.246.0-2.el4.i386",
                "product": {
                  "name": "flash-plugin-0:9.0.246.0-2.el4.i386",
                  "product_id": "flash-plugin-0:9.0.246.0-2.el4.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/flash-plugin@9.0.246.0-2.el4?arch=i386"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-plugin-0:9.0.246.0-2.el3.with.oss.i386 as a component of Red Hat Enterprise Linux AS version 3 Extras",
          "product_id": "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386"
        },
        "product_reference": "flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
        "relates_to_product_reference": "3AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-plugin-0:9.0.246.0-2.el3.with.oss.i386 as a component of Red Hat Desktop version 3 Extras",
          "product_id": "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386"
        },
        "product_reference": "flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
        "relates_to_product_reference": "3Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-plugin-0:9.0.246.0-2.el3.with.oss.i386 as a component of Red Hat Enterprise Linux ES version 3 Extras",
          "product_id": "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386"
        },
        "product_reference": "flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
        "relates_to_product_reference": "3ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-plugin-0:9.0.246.0-2.el3.with.oss.i386 as a component of Red Hat Enterprise Linux WS version 3 Extras",
          "product_id": "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386"
        },
        "product_reference": "flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
        "relates_to_product_reference": "3WS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-plugin-0:9.0.246.0-2.el4.i386 as a component of Red Hat Enterprise Linux AS version 4 Extras",
          "product_id": "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        },
        "product_reference": "flash-plugin-0:9.0.246.0-2.el4.i386",
        "relates_to_product_reference": "4AS-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-plugin-0:9.0.246.0-2.el4.i386 as a component of Red Hat Desktop version 4 Extras",
          "product_id": "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        },
        "product_reference": "flash-plugin-0:9.0.246.0-2.el4.i386",
        "relates_to_product_reference": "4Desktop-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-plugin-0:9.0.246.0-2.el4.i386 as a component of Red Hat Enterprise Linux ES version 4 Extras",
          "product_id": "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        },
        "product_reference": "flash-plugin-0:9.0.246.0-2.el4.i386",
        "relates_to_product_reference": "4ES-LACD"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "flash-plugin-0:9.0.246.0-2.el4.i386 as a component of Red Hat Enterprise Linux WS version 4 Extras",
          "product_id": "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        },
        "product_reference": "flash-plugin-0:9.0.246.0-2.el4.i386",
        "relates_to_product_reference": "4WS-LACD"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2009-1862",
      "discovery_date": "2009-07-21T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "513362"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "flash-plugin: Remote code execution vulnerability via malicious SWF (Shockwave Flash) content",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1862"
        },
        {
          "category": "external",
          "summary": "RHBZ#513362",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=513362"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1862",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1862"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1862",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1862"
        },
        {
          "category": "external",
          "summary": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        }
      ],
      "release_date": "2009-07-21T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-31T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1189"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ]
        }
      ],
      "threats": [
        {
          "category": "exploit_status",
          "date": "2022-06-08T00:00:00+00:00",
          "details": "CISA: https://www.cisa.gov/known-exploited-vulnerabilities-catalog"
        },
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "flash-plugin: Remote code execution vulnerability via malicious SWF (Shockwave Flash) content"
    },
    {
      "cve": "CVE-2009-1863",
      "discovery_date": "2009-07-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "514874"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to a \"privilege escalation vulnerability.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "flash-plugin: multiple code execution flaws (APSB09-10)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1863"
        },
        {
          "category": "external",
          "summary": "RHBZ#514874",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=514874"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1863",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1863"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1863",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1863"
        }
      ],
      "release_date": "2009-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-31T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1189"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "flash-plugin: multiple code execution flaws (APSB09-10)"
    },
    {
      "cve": "CVE-2009-1864",
      "discovery_date": "2009-07-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "514874"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "flash-plugin: multiple code execution flaws (APSB09-10)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1864"
        },
        {
          "category": "external",
          "summary": "RHBZ#514874",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=514874"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1864",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1864"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1864",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1864"
        }
      ],
      "release_date": "2009-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-31T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1189"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "flash-plugin: multiple code execution flaws (APSB09-10)"
    },
    {
      "cve": "CVE-2009-1865",
      "discovery_date": "2009-07-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "514874"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a \"null pointer vulnerability.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "flash-plugin: multiple code execution flaws (APSB09-10)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1865"
        },
        {
          "category": "external",
          "summary": "RHBZ#514874",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=514874"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1865",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1865"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1865",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1865"
        }
      ],
      "release_date": "2009-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-31T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1189"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "flash-plugin: multiple code execution flaws (APSB09-10)"
    },
    {
      "cve": "CVE-2009-1866",
      "discovery_date": "2009-07-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "514874"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "flash-plugin: multiple code execution flaws (APSB09-10)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1866"
        },
        {
          "category": "external",
          "summary": "RHBZ#514874",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=514874"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1866",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1866"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1866",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1866"
        }
      ],
      "release_date": "2009-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-31T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1189"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "flash-plugin: multiple code execution flaws (APSB09-10)"
    },
    {
      "cve": "CVE-2009-1867",
      "discovery_date": "2009-07-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "514877"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a \"clickjacking vulnerability.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "flash-plugin: multiple information disclosure flaws (APSB09-10)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1867"
        },
        {
          "category": "external",
          "summary": "RHBZ#514877",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=514877"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1867",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1867"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1867",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1867"
        }
      ],
      "release_date": "2009-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-31T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1189"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "flash-plugin: multiple information disclosure flaws (APSB09-10)"
    },
    {
      "cve": "CVE-2009-1868",
      "discovery_date": "2009-07-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "514874"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "flash-plugin: multiple code execution flaws (APSB09-10)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1868"
        },
        {
          "category": "external",
          "summary": "RHBZ#514874",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=514874"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1868",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1868"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1868",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1868"
        }
      ],
      "release_date": "2009-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-31T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1189"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "flash-plugin: multiple code execution flaws (APSB09-10)"
    },
    {
      "cve": "CVE-2009-1869",
      "discovery_date": "2009-07-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "514874"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "flash-plugin: multiple code execution flaws (APSB09-10)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1869"
        },
        {
          "category": "external",
          "summary": "RHBZ#514874",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=514874"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1869",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1869"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1869",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1869"
        }
      ],
      "release_date": "2009-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-31T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1189"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          "products": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "flash-plugin: multiple code execution flaws (APSB09-10)"
    },
    {
      "cve": "CVE-2009-1870",
      "discovery_date": "2009-07-30T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "514877"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a \"local sandbox vulnerability.\"",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "flash-plugin: multiple information disclosure flaws (APSB09-10)",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
          "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
          "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2009-1870"
        },
        {
          "category": "external",
          "summary": "RHBZ#514877",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=514877"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2009-1870",
          "url": "https://www.cve.org/CVERecord?id=CVE-2009-1870"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2009-1870",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-1870"
        }
      ],
      "release_date": "2009-07-30T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2009-07-31T14:16:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network. Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/docs/DOC-11259",
          "product_ids": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2009:1189"
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "version": "2.0"
          },
          "products": [
            "3AS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3Desktop-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3ES-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "3WS-LACD:flash-plugin-0:9.0.246.0-2.el3.with.oss.i386",
            "4AS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4Desktop-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4ES-LACD:flash-plugin-0:9.0.246.0-2.el4.i386",
            "4WS-LACD:flash-plugin-0:9.0.246.0-2.el4.i386"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "flash-plugin: multiple information disclosure flaws (APSB09-10)"
    }
  ]
}

CVE-2009-1862 (GCVE-0-2009-1862)

Vulnerability from cvelistv5 – Published: 2009-07-23 20:00 – Updated: 2025-10-22 00:05

Summary

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Assigner

mitre

References

20 references

URL	Tags
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://www.kb.cert.org/vuls/id/259425	third-party-advisoryx_refsource_CERT-VN
http://www.symantec.com/business/security_respons…	x_refsource_MISC
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://security.gentoo.org/glsa/glsa-200908-04.xml	vendor-advisoryx_refsource_GENTOO
http://support.apple.com/kb/HT3864	x_refsource_CONFIRM
http://isc.sans.org/diary.html?storyid=6847	x_refsource_MISC
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://blogs.adobe.com/psirt/2009/07/potential_ad…	x_refsource_MISC
http://www.symantec.com/connect/blogs/next-genera…	x_refsource_MISC
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://bugs.adobe.com/jira/browse/FP-1265	x_refsource_MISC
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://secunia.com/advisories/36374	third-party-advisoryx_refsource_SECUNIA
http://support.apple.com/kb/HT3865	x_refsource_CONFIRM
http://secunia.com/advisories/36193	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36701	third-party-advisoryx_refsource_SECUNIA
http://www.adobe.com/support/security/advisories/…	x_refsource_CONFIRM
http://news.cnet.com/8301-27080_3-10293389-245.html	x_refsource_MISC
http://www.securityfocus.com/bid/35759	vdb-entryx_refsource_BID

Date Public

2009-07-21 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:27:54.654Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "266108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
          },
          {
            "name": "VU#259425",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/259425"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-072209-2512-99"
          },
          {
            "name": "APPLE-SA-2009-09-10-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
          },
          {
            "name": "GLSA-200908-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3864"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://isc.sans.org/diary.html?storyid=6847"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://blogs.adobe.com/psirt/2009/07/potential_adobe_reader_and_fla.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability"
          },
          {
            "name": "APPLE-SA-2009-09-10-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bugs.adobe.com/jira/browse/FP-1265"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
          },
          {
            "name": "36374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36374"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3865"
          },
          {
            "name": "36193",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36193"
          },
          {
            "name": "36701",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36701"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/advisories/apsa09-03.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://news.cnet.com/8301-27080_3-10293389-245.html"
          },
          {
            "name": "35759",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35759"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2009-1862",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-10T18:44:49.743895Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2022-06-08",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1862"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-22T00:05:54.394Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-1862"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2022-06-08T00:00:00.000Z",
            "value": "CVE-2009-1862 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2009-07-28T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "266108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
        },
        {
          "name": "VU#259425",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/259425"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-072209-2512-99"
        },
        {
          "name": "APPLE-SA-2009-09-10-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
        },
        {
          "name": "GLSA-200908-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3864"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://isc.sans.org/diary.html?storyid=6847"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://blogs.adobe.com/psirt/2009/07/potential_adobe_reader_and_fla.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability"
        },
        {
          "name": "APPLE-SA-2009-09-10-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bugs.adobe.com/jira/browse/FP-1265"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
        },
        {
          "name": "36374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36374"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3865"
        },
        {
          "name": "36193",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36193"
        },
        {
          "name": "36701",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36701"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/advisories/apsa09-03.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://news.cnet.com/8301-27080_3-10293389-245.html"
        },
        {
          "name": "35759",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35759"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-1862",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "266108",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
            },
            {
              "name": "VU#259425",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/259425"
            },
            {
              "name": "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-072209-2512-99",
              "refsource": "MISC",
              "url": "http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-072209-2512-99"
            },
            {
              "name": "APPLE-SA-2009-09-10-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
            },
            {
              "name": "GLSA-200908-04",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
            },
            {
              "name": "http://support.apple.com/kb/HT3864",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3864"
            },
            {
              "name": "http://isc.sans.org/diary.html?storyid=6847",
              "refsource": "MISC",
              "url": "http://isc.sans.org/diary.html?storyid=6847"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
            },
            {
              "name": "http://blogs.adobe.com/psirt/2009/07/potential_adobe_reader_and_fla.html",
              "refsource": "MISC",
              "url": "http://blogs.adobe.com/psirt/2009/07/potential_adobe_reader_and_fla.html"
            },
            {
              "name": "http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability",
              "refsource": "MISC",
              "url": "http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability"
            },
            {
              "name": "APPLE-SA-2009-09-10-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
            },
            {
              "name": "http://bugs.adobe.com/jira/browse/FP-1265",
              "refsource": "MISC",
              "url": "http://bugs.adobe.com/jira/browse/FP-1265"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
            },
            {
              "name": "36374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36374"
            },
            {
              "name": "http://support.apple.com/kb/HT3865",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3865"
            },
            {
              "name": "36193",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36193"
            },
            {
              "name": "36701",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36701"
            },
            {
              "name": "http://www.adobe.com/support/security/advisories/apsa09-03.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/advisories/apsa09-03.html"
            },
            {
              "name": "http://news.cnet.com/8301-27080_3-10293389-245.html",
              "refsource": "MISC",
              "url": "http://news.cnet.com/8301-27080_3-10293389-245.html"
            },
            {
              "name": "35759",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35759"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-1862",
    "datePublished": "2009-07-23T20:00:00.000Z",
    "dateReserved": "2009-06-01T00:00:00.000Z",
    "dateUpdated": "2025-10-22T00:05:54.394Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-1863 (GCVE-0-2009-1863)

Vulnerability from cvelistv5 – Published: 2009-07-31 19:00 – Updated: 2024-08-07 05:27

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre

References

18 references

URL	Tags
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://security.gentoo.org/glsa/glsa-200908-04.xml	vendor-advisoryx_refsource_GENTOO
http://support.apple.com/kb/HT3864	x_refsource_CONFIRM
http://www.securityfocus.com/bid/35900	vdb-entryx_refsource_BID
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://www.securitytracker.com/id?1022629	vdb-entryx_refsource_SECTRACK
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.vupen.com/english/advisories/2009/2086	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/35890	vdb-entryx_refsource_BID
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://secunia.com/advisories/36374	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://support.apple.com/kb/HT3865	x_refsource_CONFIRM
http://secunia.com/advisories/36193	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36701	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF

Date Public

2009-07-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:27:54.692Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "266108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
          },
          {
            "name": "APPLE-SA-2009-09-10-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
          },
          {
            "name": "GLSA-200908-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3864"
          },
          {
            "name": "35900",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35900"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
          },
          {
            "name": "1022629",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022629"
          },
          {
            "name": "APPLE-SA-2009-09-10-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
          },
          {
            "name": "oval:org.mitre.oval:def:16391",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16391"
          },
          {
            "name": "ADV-2009-2086",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2086"
          },
          {
            "name": "35890",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35890"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
          },
          {
            "name": "36374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36374"
          },
          {
            "name": "oval:org.mitre.oval:def:6961",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6961"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3865"
          },
          {
            "name": "36193",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36193"
          },
          {
            "name": "36701",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36701"
          },
          {
            "name": "adobe-flash-air-code-execution(52179)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52179"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to a \"privilege escalation vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "266108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
        },
        {
          "name": "APPLE-SA-2009-09-10-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
        },
        {
          "name": "GLSA-200908-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3864"
        },
        {
          "name": "35900",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35900"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
        },
        {
          "name": "1022629",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022629"
        },
        {
          "name": "APPLE-SA-2009-09-10-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
        },
        {
          "name": "oval:org.mitre.oval:def:16391",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16391"
        },
        {
          "name": "ADV-2009-2086",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2086"
        },
        {
          "name": "35890",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35890"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
        },
        {
          "name": "36374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36374"
        },
        {
          "name": "oval:org.mitre.oval:def:6961",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6961"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3865"
        },
        {
          "name": "36193",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36193"
        },
        {
          "name": "36701",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36701"
        },
        {
          "name": "adobe-flash-air-code-execution(52179)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52179"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-1863",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to a \"privilege escalation vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "266108",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
            },
            {
              "name": "APPLE-SA-2009-09-10-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
            },
            {
              "name": "GLSA-200908-04",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
            },
            {
              "name": "http://support.apple.com/kb/HT3864",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3864"
            },
            {
              "name": "35900",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35900"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
            },
            {
              "name": "1022629",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022629"
            },
            {
              "name": "APPLE-SA-2009-09-10-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
            },
            {
              "name": "oval:org.mitre.oval:def:16391",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16391"
            },
            {
              "name": "ADV-2009-2086",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/2086"
            },
            {
              "name": "35890",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35890"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
            },
            {
              "name": "36374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36374"
            },
            {
              "name": "oval:org.mitre.oval:def:6961",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6961"
            },
            {
              "name": "http://support.apple.com/kb/HT3865",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3865"
            },
            {
              "name": "36193",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36193"
            },
            {
              "name": "36701",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36701"
            },
            {
              "name": "adobe-flash-air-code-execution(52179)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52179"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-1863",
    "datePublished": "2009-07-31T19:00:00.000Z",
    "dateReserved": "2009-06-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T05:27:54.692Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-1864 (GCVE-0-2009-1864)

Vulnerability from cvelistv5 – Published: 2009-07-31 19:00 – Updated: 2024-08-07 05:27

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre

References

18 references

URL	Tags
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://security.gentoo.org/glsa/glsa-200908-04.xml	vendor-advisoryx_refsource_GENTOO
http://support.apple.com/kb/HT3864	x_refsource_CONFIRM
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://www.securitytracker.com/id?1022629	vdb-entryx_refsource_SECTRACK
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.vupen.com/english/advisories/2009/2086	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/35890	vdb-entryx_refsource_BID
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://secunia.com/advisories/36374	third-party-advisoryx_refsource_SECUNIA
http://support.apple.com/kb/HT3865	x_refsource_CONFIRM
http://secunia.com/advisories/36193	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36701	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/35904	vdb-entryx_refsource_BID

Date Public

2009-07-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:27:54.813Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "266108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
          },
          {
            "name": "APPLE-SA-2009-09-10-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
          },
          {
            "name": "GLSA-200908-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3864"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
          },
          {
            "name": "1022629",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022629"
          },
          {
            "name": "flash-air-unspecified-bo(52184)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52184"
          },
          {
            "name": "oval:org.mitre.oval:def:16133",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16133"
          },
          {
            "name": "APPLE-SA-2009-09-10-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6660",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6660"
          },
          {
            "name": "ADV-2009-2086",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2086"
          },
          {
            "name": "35890",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35890"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
          },
          {
            "name": "36374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36374"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3865"
          },
          {
            "name": "36193",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36193"
          },
          {
            "name": "36701",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36701"
          },
          {
            "name": "35904",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35904"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "266108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
        },
        {
          "name": "APPLE-SA-2009-09-10-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
        },
        {
          "name": "GLSA-200908-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3864"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
        },
        {
          "name": "1022629",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022629"
        },
        {
          "name": "flash-air-unspecified-bo(52184)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52184"
        },
        {
          "name": "oval:org.mitre.oval:def:16133",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16133"
        },
        {
          "name": "APPLE-SA-2009-09-10-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6660",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6660"
        },
        {
          "name": "ADV-2009-2086",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2086"
        },
        {
          "name": "35890",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35890"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
        },
        {
          "name": "36374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36374"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3865"
        },
        {
          "name": "36193",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36193"
        },
        {
          "name": "36701",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36701"
        },
        {
          "name": "35904",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35904"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-1864",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "266108",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
            },
            {
              "name": "APPLE-SA-2009-09-10-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
            },
            {
              "name": "GLSA-200908-04",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
            },
            {
              "name": "http://support.apple.com/kb/HT3864",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3864"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
            },
            {
              "name": "1022629",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022629"
            },
            {
              "name": "flash-air-unspecified-bo(52184)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52184"
            },
            {
              "name": "oval:org.mitre.oval:def:16133",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16133"
            },
            {
              "name": "APPLE-SA-2009-09-10-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6660",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6660"
            },
            {
              "name": "ADV-2009-2086",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/2086"
            },
            {
              "name": "35890",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35890"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
            },
            {
              "name": "36374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36374"
            },
            {
              "name": "http://support.apple.com/kb/HT3865",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3865"
            },
            {
              "name": "36193",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36193"
            },
            {
              "name": "36701",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36701"
            },
            {
              "name": "35904",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35904"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-1864",
    "datePublished": "2009-07-31T19:00:00.000Z",
    "dateReserved": "2009-06-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T05:27:54.813Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-1865 (GCVE-0-2009-1865)

Vulnerability from cvelistv5 – Published: 2009-07-31 19:00 – Updated: 2024-08-07 05:27

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre

References

18 references

URL	Tags
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://security.gentoo.org/glsa/glsa-200908-04.xml	vendor-advisoryx_refsource_GENTOO
http://support.apple.com/kb/HT3864	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://www.securitytracker.com/id?1022629	vdb-entryx_refsource_SECTRACK
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.vupen.com/english/advisories/2009/2086	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/35890	vdb-entryx_refsource_BID
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://secunia.com/advisories/36374	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/35906	vdb-entryx_refsource_BID
http://support.apple.com/kb/HT3865	x_refsource_CONFIRM
http://secunia.com/advisories/36193	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36701	third-party-advisoryx_refsource_SECUNIA

Date Public

2009-07-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:27:54.658Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "266108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
          },
          {
            "name": "APPLE-SA-2009-09-10-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
          },
          {
            "name": "GLSA-200908-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3864"
          },
          {
            "name": "oval:org.mitre.oval:def:7011",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7011"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
          },
          {
            "name": "1022629",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022629"
          },
          {
            "name": "flash-air-code-execution-var1(52182)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52182"
          },
          {
            "name": "APPLE-SA-2009-09-10-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
          },
          {
            "name": "ADV-2009-2086",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2086"
          },
          {
            "name": "35890",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35890"
          },
          {
            "name": "oval:org.mitre.oval:def:16338",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16338"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
          },
          {
            "name": "36374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36374"
          },
          {
            "name": "35906",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35906"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3865"
          },
          {
            "name": "36193",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36193"
          },
          {
            "name": "36701",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36701"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a \"null pointer vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "266108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
        },
        {
          "name": "APPLE-SA-2009-09-10-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
        },
        {
          "name": "GLSA-200908-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3864"
        },
        {
          "name": "oval:org.mitre.oval:def:7011",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7011"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
        },
        {
          "name": "1022629",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022629"
        },
        {
          "name": "flash-air-code-execution-var1(52182)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52182"
        },
        {
          "name": "APPLE-SA-2009-09-10-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
        },
        {
          "name": "ADV-2009-2086",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2086"
        },
        {
          "name": "35890",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35890"
        },
        {
          "name": "oval:org.mitre.oval:def:16338",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16338"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
        },
        {
          "name": "36374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36374"
        },
        {
          "name": "35906",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35906"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3865"
        },
        {
          "name": "36193",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36193"
        },
        {
          "name": "36701",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36701"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-1865",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a \"null pointer vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "266108",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
            },
            {
              "name": "APPLE-SA-2009-09-10-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
            },
            {
              "name": "GLSA-200908-04",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
            },
            {
              "name": "http://support.apple.com/kb/HT3864",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3864"
            },
            {
              "name": "oval:org.mitre.oval:def:7011",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7011"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
            },
            {
              "name": "1022629",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022629"
            },
            {
              "name": "flash-air-code-execution-var1(52182)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52182"
            },
            {
              "name": "APPLE-SA-2009-09-10-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
            },
            {
              "name": "ADV-2009-2086",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/2086"
            },
            {
              "name": "35890",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35890"
            },
            {
              "name": "oval:org.mitre.oval:def:16338",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16338"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
            },
            {
              "name": "36374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36374"
            },
            {
              "name": "35906",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35906"
            },
            {
              "name": "http://support.apple.com/kb/HT3865",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3865"
            },
            {
              "name": "36193",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36193"
            },
            {
              "name": "36701",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36701"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-1865",
    "datePublished": "2009-07-31T19:00:00.000Z",
    "dateReserved": "2009-06-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T05:27:54.658Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-1866 (GCVE-0-2009-1866)

Vulnerability from cvelistv5 – Published: 2009-07-31 19:00 – Updated: 2024-08-07 05:27

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre

References

19 references

URL	Tags
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://security.gentoo.org/glsa/glsa-200908-04.xml	vendor-advisoryx_refsource_GENTOO
http://support.apple.com/kb/HT3864	x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://www.securitytracker.com/id?1022629	vdb-entryx_refsource_SECTRACK
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.securityfocus.com/bid/35901	vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/2086	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/35890	vdb-entryx_refsource_BID
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://secunia.com/advisories/36374	third-party-advisoryx_refsource_SECUNIA
http://support.apple.com/kb/HT3865	x_refsource_CONFIRM
http://secunia.com/advisories/36193	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36701	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://osvdb.org/56774	vdb-entryx_refsource_OSVDB

Date Public

2009-07-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:27:54.652Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:7271",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7271"
          },
          {
            "name": "266108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
          },
          {
            "name": "APPLE-SA-2009-09-10-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
          },
          {
            "name": "GLSA-200908-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3864"
          },
          {
            "name": "flash-air-unspecified-bo-var2(52186)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52186"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
          },
          {
            "name": "1022629",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022629"
          },
          {
            "name": "APPLE-SA-2009-09-10-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
          },
          {
            "name": "35901",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35901"
          },
          {
            "name": "ADV-2009-2086",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2086"
          },
          {
            "name": "35890",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35890"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
          },
          {
            "name": "36374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36374"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3865"
          },
          {
            "name": "36193",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36193"
          },
          {
            "name": "36701",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36701"
          },
          {
            "name": "oval:org.mitre.oval:def:16198",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16198"
          },
          {
            "name": "56774",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/56774"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:7271",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7271"
        },
        {
          "name": "266108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
        },
        {
          "name": "APPLE-SA-2009-09-10-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
        },
        {
          "name": "GLSA-200908-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3864"
        },
        {
          "name": "flash-air-unspecified-bo-var2(52186)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52186"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
        },
        {
          "name": "1022629",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022629"
        },
        {
          "name": "APPLE-SA-2009-09-10-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
        },
        {
          "name": "35901",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35901"
        },
        {
          "name": "ADV-2009-2086",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2086"
        },
        {
          "name": "35890",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35890"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
        },
        {
          "name": "36374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36374"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3865"
        },
        {
          "name": "36193",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36193"
        },
        {
          "name": "36701",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36701"
        },
        {
          "name": "oval:org.mitre.oval:def:16198",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16198"
        },
        {
          "name": "56774",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/56774"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-1866",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:7271",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7271"
            },
            {
              "name": "266108",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
            },
            {
              "name": "APPLE-SA-2009-09-10-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
            },
            {
              "name": "GLSA-200908-04",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
            },
            {
              "name": "http://support.apple.com/kb/HT3864",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3864"
            },
            {
              "name": "flash-air-unspecified-bo-var2(52186)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52186"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
            },
            {
              "name": "1022629",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022629"
            },
            {
              "name": "APPLE-SA-2009-09-10-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
            },
            {
              "name": "35901",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35901"
            },
            {
              "name": "ADV-2009-2086",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/2086"
            },
            {
              "name": "35890",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35890"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
            },
            {
              "name": "36374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36374"
            },
            {
              "name": "http://support.apple.com/kb/HT3865",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3865"
            },
            {
              "name": "36193",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36193"
            },
            {
              "name": "36701",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36701"
            },
            {
              "name": "oval:org.mitre.oval:def:16198",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16198"
            },
            {
              "name": "56774",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/56774"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-1866",
    "datePublished": "2009-07-31T19:00:00.000Z",
    "dateReserved": "2009-06-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T05:27:54.652Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-1867 (GCVE-0-2009-1867)

Vulnerability from cvelistv5 – Published: 2009-07-31 19:00 – Updated: 2024-08-07 05:27

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre

References

19 references

URL	Tags
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://security.gentoo.org/glsa/glsa-200908-04.xml	vendor-advisoryx_refsource_GENTOO
http://support.apple.com/kb/HT3864	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://www.securitytracker.com/id?1022629	vdb-entryx_refsource_SECTRACK
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://osvdb.org/56775	vdb-entryx_refsource_OSVDB
http://www.vupen.com/english/advisories/2009/2086	vdb-entryx_refsource_VUPEN
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/bid/35890	vdb-entryx_refsource_BID
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://secunia.com/advisories/36374	third-party-advisoryx_refsource_SECUNIA
http://support.apple.com/kb/HT3865	x_refsource_CONFIRM
http://secunia.com/advisories/36193	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36701	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/35905	vdb-entryx_refsource_BID

Date Public

2009-07-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:27:54.670Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "266108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
          },
          {
            "name": "flash-air-unspecified-clickjacking(52183)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52183"
          },
          {
            "name": "APPLE-SA-2009-09-10-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
          },
          {
            "name": "GLSA-200908-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3864"
          },
          {
            "name": "oval:org.mitre.oval:def:6694",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6694"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
          },
          {
            "name": "1022629",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022629"
          },
          {
            "name": "APPLE-SA-2009-09-10-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
          },
          {
            "name": "56775",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/56775"
          },
          {
            "name": "ADV-2009-2086",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2086"
          },
          {
            "name": "oval:org.mitre.oval:def:15430",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15430"
          },
          {
            "name": "35890",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35890"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
          },
          {
            "name": "36374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36374"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3865"
          },
          {
            "name": "36193",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36193"
          },
          {
            "name": "36701",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36701"
          },
          {
            "name": "35905",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35905"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a \"clickjacking vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "266108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
        },
        {
          "name": "flash-air-unspecified-clickjacking(52183)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52183"
        },
        {
          "name": "APPLE-SA-2009-09-10-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
        },
        {
          "name": "GLSA-200908-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3864"
        },
        {
          "name": "oval:org.mitre.oval:def:6694",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6694"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
        },
        {
          "name": "1022629",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022629"
        },
        {
          "name": "APPLE-SA-2009-09-10-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
        },
        {
          "name": "56775",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/56775"
        },
        {
          "name": "ADV-2009-2086",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2086"
        },
        {
          "name": "oval:org.mitre.oval:def:15430",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15430"
        },
        {
          "name": "35890",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35890"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
        },
        {
          "name": "36374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36374"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3865"
        },
        {
          "name": "36193",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36193"
        },
        {
          "name": "36701",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36701"
        },
        {
          "name": "35905",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35905"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-1867",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a \"clickjacking vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "266108",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
            },
            {
              "name": "flash-air-unspecified-clickjacking(52183)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52183"
            },
            {
              "name": "APPLE-SA-2009-09-10-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
            },
            {
              "name": "GLSA-200908-04",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
            },
            {
              "name": "http://support.apple.com/kb/HT3864",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3864"
            },
            {
              "name": "oval:org.mitre.oval:def:6694",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6694"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
            },
            {
              "name": "1022629",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022629"
            },
            {
              "name": "APPLE-SA-2009-09-10-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
            },
            {
              "name": "56775",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/56775"
            },
            {
              "name": "ADV-2009-2086",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/2086"
            },
            {
              "name": "oval:org.mitre.oval:def:15430",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15430"
            },
            {
              "name": "35890",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35890"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
            },
            {
              "name": "36374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36374"
            },
            {
              "name": "http://support.apple.com/kb/HT3865",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3865"
            },
            {
              "name": "36193",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36193"
            },
            {
              "name": "36701",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36701"
            },
            {
              "name": "35905",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35905"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-1867",
    "datePublished": "2009-07-31T19:00:00.000Z",
    "dateReserved": "2009-06-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T05:27:54.670Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-1868 (GCVE-0-2009-1868)

Vulnerability from cvelistv5 – Published: 2009-07-31 19:00 – Updated: 2024-08-07 05:27

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre

References

19 references

URL	Tags
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://security.gentoo.org/glsa/glsa-200908-04.xml	vendor-advisoryx_refsource_GENTOO
http://support.apple.com/kb/HT3864	x_refsource_CONFIRM
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://www.securityfocus.com/bid/35902	vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1022629	vdb-entryx_refsource_SECTRACK
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.vupen.com/english/advisories/2009/2086	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/35890	vdb-entryx_refsource_BID
http://osvdb.org/56776	vdb-entryx_refsource_OSVDB
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://secunia.com/advisories/36374	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://support.apple.com/kb/HT3865	x_refsource_CONFIRM
http://secunia.com/advisories/36193	third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/36701	third-party-advisoryx_refsource_SECUNIA

Date Public

2009-07-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:27:54.513Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "266108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
          },
          {
            "name": "flash-air-unspecified-bo-var1(52185)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52185"
          },
          {
            "name": "APPLE-SA-2009-09-10-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
          },
          {
            "name": "GLSA-200908-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3864"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
          },
          {
            "name": "oval:org.mitre.oval:def:15955",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15955"
          },
          {
            "name": "35902",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35902"
          },
          {
            "name": "1022629",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022629"
          },
          {
            "name": "APPLE-SA-2009-09-10-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
          },
          {
            "name": "ADV-2009-2086",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2086"
          },
          {
            "name": "35890",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35890"
          },
          {
            "name": "56776",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/56776"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
          },
          {
            "name": "36374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36374"
          },
          {
            "name": "oval:org.mitre.oval:def:6865",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6865"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3865"
          },
          {
            "name": "36193",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36193"
          },
          {
            "name": "36701",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36701"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "266108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
        },
        {
          "name": "flash-air-unspecified-bo-var1(52185)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52185"
        },
        {
          "name": "APPLE-SA-2009-09-10-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
        },
        {
          "name": "GLSA-200908-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3864"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
        },
        {
          "name": "oval:org.mitre.oval:def:15955",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15955"
        },
        {
          "name": "35902",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35902"
        },
        {
          "name": "1022629",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022629"
        },
        {
          "name": "APPLE-SA-2009-09-10-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
        },
        {
          "name": "ADV-2009-2086",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2086"
        },
        {
          "name": "35890",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35890"
        },
        {
          "name": "56776",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/56776"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
        },
        {
          "name": "36374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36374"
        },
        {
          "name": "oval:org.mitre.oval:def:6865",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6865"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3865"
        },
        {
          "name": "36193",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36193"
        },
        {
          "name": "36701",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36701"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-1868",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "266108",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
            },
            {
              "name": "flash-air-unspecified-bo-var1(52185)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52185"
            },
            {
              "name": "APPLE-SA-2009-09-10-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
            },
            {
              "name": "GLSA-200908-04",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
            },
            {
              "name": "http://support.apple.com/kb/HT3864",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3864"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
            },
            {
              "name": "oval:org.mitre.oval:def:15955",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15955"
            },
            {
              "name": "35902",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35902"
            },
            {
              "name": "1022629",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022629"
            },
            {
              "name": "APPLE-SA-2009-09-10-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
            },
            {
              "name": "ADV-2009-2086",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/2086"
            },
            {
              "name": "35890",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35890"
            },
            {
              "name": "56776",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/56776"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
            },
            {
              "name": "36374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36374"
            },
            {
              "name": "oval:org.mitre.oval:def:6865",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6865"
            },
            {
              "name": "http://support.apple.com/kb/HT3865",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3865"
            },
            {
              "name": "36193",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36193"
            },
            {
              "name": "36701",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36701"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-1868",
    "datePublished": "2009-07-31T19:00:00.000Z",
    "dateReserved": "2009-06-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T05:27:54.513Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-1869 (GCVE-0-2009-1869)

Vulnerability from cvelistv5 – Published: 2009-07-31 19:00 – Updated: 2024-08-07 05:27

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre

References

22 references

URL	Tags
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://security.gentoo.org/glsa/glsa-200908-04.xml	vendor-advisoryx_refsource_GENTOO
http://support.apple.com/kb/HT3864	x_refsource_CONFIRM
http://www.securityfocus.com/bid/35907	vdb-entryx_refsource_BID
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://www.securitytracker.com/id?1022629	vdb-entryx_refsource_SECTRACK
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.securityfocus.com/archive/1/505467/100…	mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2009/2086	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/35890	vdb-entryx_refsource_BID
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://secunia.com/advisories/36374	third-party-advisoryx_refsource_SECUNIA
http://roeehay.blogspot.com/2009/08/exploitation-…	x_refsource_MISC
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://support.apple.com/kb/HT3865	x_refsource_CONFIRM
http://secunia.com/advisories/36193	third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/56777	vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/36701	third-party-advisoryx_refsource_SECUNIA
http://roeehay.blogspot.com/2009/08/advisory-adob…	x_refsource_MISC
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL

Date Public

2009-07-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:27:54.709Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "266108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
          },
          {
            "name": "APPLE-SA-2009-09-10-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
          },
          {
            "name": "GLSA-200908-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3864"
          },
          {
            "name": "35907",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35907"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
          },
          {
            "name": "1022629",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022629"
          },
          {
            "name": "APPLE-SA-2009-09-10-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
          },
          {
            "name": "20090802 Advisory: Adobe Flash Player and AIR AVM2 intf_count Integer Overflow Remote Code Execution (CVE-2009-1869)",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/505467/100/0/threaded"
          },
          {
            "name": "flash-air-code-execution(52181)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52181"
          },
          {
            "name": "ADV-2009-2086",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2086"
          },
          {
            "name": "35890",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35890"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
          },
          {
            "name": "36374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36374"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.html"
          },
          {
            "name": "oval:org.mitre.oval:def:6998",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6998"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3865"
          },
          {
            "name": "36193",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36193"
          },
          {
            "name": "56777",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/56777"
          },
          {
            "name": "36701",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36701"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://roeehay.blogspot.com/2009/08/advisory-adobe-flash-player-avm2.html"
          },
          {
            "name": "oval:org.mitre.oval:def:15994",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15994"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-10T18:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "266108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
        },
        {
          "name": "APPLE-SA-2009-09-10-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
        },
        {
          "name": "GLSA-200908-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3864"
        },
        {
          "name": "35907",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35907"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
        },
        {
          "name": "1022629",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022629"
        },
        {
          "name": "APPLE-SA-2009-09-10-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
        },
        {
          "name": "20090802 Advisory: Adobe Flash Player and AIR AVM2 intf_count Integer Overflow Remote Code Execution (CVE-2009-1869)",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/505467/100/0/threaded"
        },
        {
          "name": "flash-air-code-execution(52181)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52181"
        },
        {
          "name": "ADV-2009-2086",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2086"
        },
        {
          "name": "35890",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35890"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
        },
        {
          "name": "36374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36374"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.html"
        },
        {
          "name": "oval:org.mitre.oval:def:6998",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6998"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3865"
        },
        {
          "name": "36193",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36193"
        },
        {
          "name": "56777",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/56777"
        },
        {
          "name": "36701",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36701"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://roeehay.blogspot.com/2009/08/advisory-adobe-flash-player-avm2.html"
        },
        {
          "name": "oval:org.mitre.oval:def:15994",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15994"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-1869",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "266108",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
            },
            {
              "name": "APPLE-SA-2009-09-10-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
            },
            {
              "name": "GLSA-200908-04",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
            },
            {
              "name": "http://support.apple.com/kb/HT3864",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3864"
            },
            {
              "name": "35907",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35907"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
            },
            {
              "name": "1022629",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022629"
            },
            {
              "name": "APPLE-SA-2009-09-10-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
            },
            {
              "name": "20090802 Advisory: Adobe Flash Player and AIR AVM2 intf_count Integer Overflow Remote Code Execution (CVE-2009-1869)",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/505467/100/0/threaded"
            },
            {
              "name": "flash-air-code-execution(52181)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52181"
            },
            {
              "name": "ADV-2009-2086",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/2086"
            },
            {
              "name": "35890",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35890"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
            },
            {
              "name": "36374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36374"
            },
            {
              "name": "http://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.html",
              "refsource": "MISC",
              "url": "http://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.html"
            },
            {
              "name": "oval:org.mitre.oval:def:6998",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6998"
            },
            {
              "name": "http://support.apple.com/kb/HT3865",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3865"
            },
            {
              "name": "36193",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36193"
            },
            {
              "name": "56777",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/56777"
            },
            {
              "name": "36701",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36701"
            },
            {
              "name": "http://roeehay.blogspot.com/2009/08/advisory-adobe-flash-player-avm2.html",
              "refsource": "MISC",
              "url": "http://roeehay.blogspot.com/2009/08/advisory-adobe-flash-player-avm2.html"
            },
            {
              "name": "oval:org.mitre.oval:def:15994",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15994"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-1869",
    "datePublished": "2009-07-31T19:00:00.000Z",
    "dateReserved": "2009-06-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T05:27:54.709Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-1870 (GCVE-0-2009-1870)

Vulnerability from cvelistv5 – Published: 2009-07-31 19:00 – Updated: 2024-08-07 05:27

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre

References

19 references

URL	Tags
http://sunsolve.sun.com/search/document.do?assetk…	vendor-advisoryx_refsource_SUNALERT
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://security.gentoo.org/glsa/glsa-200908-04.xml	vendor-advisoryx_refsource_GENTOO
http://support.apple.com/kb/HT3864	x_refsource_CONFIRM
http://osvdb.org/56778	vdb-entryx_refsource_OSVDB
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://www.securitytracker.com/id?1022629	vdb-entryx_refsource_SECTRACK
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://lists.apple.com/archives/security-announce…	vendor-advisoryx_refsource_APPLE
http://www.securityfocus.com/bid/35908	vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2009/2086	vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/35890	vdb-entryx_refsource_BID
http://www.adobe.com/support/security/bulletins/a…	x_refsource_CONFIRM
http://secunia.com/advisories/36374	third-party-advisoryx_refsource_SECUNIA
http://support.apple.com/kb/HT3865	x_refsource_CONFIRM
http://secunia.com/advisories/36193	third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
http://secunia.com/advisories/36701	third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF

Date Public

2009-07-30 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T05:27:54.671Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "266108",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
          },
          {
            "name": "APPLE-SA-2009-09-10-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
          },
          {
            "name": "GLSA-200908-04",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3864"
          },
          {
            "name": "56778",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/56778"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
          },
          {
            "name": "1022629",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1022629"
          },
          {
            "name": "oval:org.mitre.oval:def:6648",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6648"
          },
          {
            "name": "APPLE-SA-2009-09-10-2",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
          },
          {
            "name": "35908",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35908"
          },
          {
            "name": "ADV-2009-2086",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/2086"
          },
          {
            "name": "35890",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/35890"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
          },
          {
            "name": "36374",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36374"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3865"
          },
          {
            "name": "36193",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36193"
          },
          {
            "name": "oval:org.mitre.oval:def:15887",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15887"
          },
          {
            "name": "36701",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36701"
          },
          {
            "name": "flash-air-sandbox-info-disclosure(52180)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52180"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-07-30T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a \"local sandbox vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "266108",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
        },
        {
          "name": "APPLE-SA-2009-09-10-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
        },
        {
          "name": "GLSA-200908-04",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3864"
        },
        {
          "name": "56778",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/56778"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
        },
        {
          "name": "1022629",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1022629"
        },
        {
          "name": "oval:org.mitre.oval:def:6648",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6648"
        },
        {
          "name": "APPLE-SA-2009-09-10-2",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
        },
        {
          "name": "35908",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35908"
        },
        {
          "name": "ADV-2009-2086",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/2086"
        },
        {
          "name": "35890",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/35890"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
        },
        {
          "name": "36374",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36374"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3865"
        },
        {
          "name": "36193",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36193"
        },
        {
          "name": "oval:org.mitre.oval:def:15887",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15887"
        },
        {
          "name": "36701",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36701"
        },
        {
          "name": "flash-air-sandbox-info-disclosure(52180)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52180"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-1870",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a \"local sandbox vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "266108",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-266108-1"
            },
            {
              "name": "APPLE-SA-2009-09-10-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html"
            },
            {
              "name": "GLSA-200908-04",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200908-04.xml"
            },
            {
              "name": "http://support.apple.com/kb/HT3864",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3864"
            },
            {
              "name": "56778",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/56778"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-13.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-13.html"
            },
            {
              "name": "1022629",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1022629"
            },
            {
              "name": "oval:org.mitre.oval:def:6648",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6648"
            },
            {
              "name": "APPLE-SA-2009-09-10-2",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html"
            },
            {
              "name": "35908",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35908"
            },
            {
              "name": "ADV-2009-2086",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/2086"
            },
            {
              "name": "35890",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/35890"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb09-10.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb09-10.html"
            },
            {
              "name": "36374",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36374"
            },
            {
              "name": "http://support.apple.com/kb/HT3865",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3865"
            },
            {
              "name": "36193",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36193"
            },
            {
              "name": "oval:org.mitre.oval:def:15887",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15887"
            },
            {
              "name": "36701",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36701"
            },
            {
              "name": "flash-air-sandbox-info-disclosure(52180)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52180"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-1870",
    "datePublished": "2009-07-31T19:00:00.000Z",
    "dateReserved": "2009-06-01T00:00:00.000Z",
    "dateUpdated": "2024-08-07T05:27:54.671Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2009_1189

CVE-2009-1862 (GCVE-0-2009-1862)

CVE-2009-1863 (GCVE-0-2009-1863)

CVE-2009-1864 (GCVE-0-2009-1864)

CVE-2009-1865 (GCVE-0-2009-1865)

CVE-2009-1866 (GCVE-0-2009-1866)

CVE-2009-1867 (GCVE-0-2009-1867)

CVE-2009-1868 (GCVE-0-2009-1868)

CVE-2009-1869 (GCVE-0-2009-1869)

CVE-2009-1870 (GCVE-0-2009-1870)

Tags

Sightings

Nomenclature