Description
Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 10.0.32.18-2.el5 | RHSA-2009:1188 |
| RHEL 4 | flash-plugin | 9.0.246.0-2.el4 | RHSA-2009:1189 |
| RHEL 3 | flash-plugin | 9.0.246.0-2.el3.with.oss | RHSA-2009:1189 |
Advisories 2
- RHSA-2009:1189 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:1188 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 266108 vendor-advisory
- APPLE-SA-2009-09-10-1 vendor-advisory
- GLSA-200908-04 vendor-advisory
- http://support.apple.com/kb/HT3864
- http://www.adobe.com/support/security/bulletins/apsb09-13.html
- 1022629 vdb-entry
- flash-air-unspecified-bo(52184) vdb-entry
- oval:org.mitre.oval:def:16133 vdb-entry signature
- APPLE-SA-2009-09-10-2 vendor-advisory
- oval:org.mitre.oval:def:6660 vdb-entry signature
- ADV-2009-2086 vdb-entry
- 35890 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb09-10.html
- 36374 third-party-advisory
- http://support.apple.com/kb/HT3865
- 36193 third-party-advisory
- 36701 third-party-advisory
- 35904 vdb-entry