Description
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 10.0.32.18-2.el5 | RHSA-2009:1188 |
| RHEL 4 | flash-plugin | 9.0.246.0-2.el4 | RHSA-2009:1189 |
| RHEL 3 | flash-plugin | 9.0.246.0-2.el3.with.oss | RHSA-2009:1189 |
Advisories 2
- RHSA-2009:1189 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:1188 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 266108 vendor-advisory
- VU#259425 third-party-advisory
- http://www.symantec.com/business/security_response/writeup.jsp?docid=2009-072209-2512-99
- APPLE-SA-2009-09-10-1 vendor-advisory
- GLSA-200908-04 vendor-advisory
- http://support.apple.com/kb/HT3864
- http://isc.sans.org/diary.html?storyid=6847
- http://www.adobe.com/support/security/bulletins/apsb09-13.html
- http://blogs.adobe.com/psirt/2009/07/potential_adobe_reader_and_fla.html
- http://www.symantec.com/connect/blogs/next-generation-flash-vulnerability
- APPLE-SA-2009-09-10-2 vendor-advisory
- http://bugs.adobe.com/jira/browse/FP-1265
- http://www.adobe.com/support/security/bulletins/apsb09-10.html
- 36374 third-party-advisory
- http://support.apple.com/kb/HT3865
- 36193 third-party-advisory
- 36701 third-party-advisory
- http://www.adobe.com/support/security/advisories/apsa09-03.html
- http://news.cnet.com/8301-27080_3-10293389-245.html
- 35759 vdb-entry