Description
Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.
References
- adobe-flash-cs3-bo(45914) vdb-entry
- 1021060 vdb-entry
- 31769 vdb-entry
- 20081015 Multiple Flash Authoring Heap Overflows - Malformed SWF Files mailing-list
- http://www.adobe.com/support/security/advisories/apsa08-09.html
- ADV-2008-2837 vdb-entry
- http://security-assessment.com/files/advisories/2008-10-16_Multiple_Flash_Authoring_Heap_Overflows.pdf
- 32246 third-party-advisory
- 4429 third-party-advisory