Description
Heap-based buffer overflow in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via crafted dimensions of JPEG data in an SWF file.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 10.0.42.34-1.el5 | RHSA-2009:1657 |
| RHEL 4 | flash-plugin | 9.0.260.0-1.el4 | RHSA-2009:1658 |
| RHEL 3 | flash-plugin | 9.0.260.0-1.el3.with.oss | RHSA-2009:1658 |
Advisories 2
- RHSA-2009:1658 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:1657 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- oval:org.mitre.oval:def:8686 vdb-entry signature
- RHSA-2009:1657 vendor-advisory
- 1023307 vdb-entry
- http://zerodayinitiative.com/advisories/ZDI-09-092/
- flash-air-jpeg-code-execution(54631) vdb-entry
- http://support.apple.com/kb/HT4004
- 1021716 vendor-advisory
- 60885 vdb-entry
- APPLE-SA-2010-01-19-1 vendor-advisory
- ADV-2009-3456 vdb-entry
- SUSE-SA:2009:062 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=543857
- 37584 third-party-advisory
- 37902 third-party-advisory
- oval:org.mitre.oval:def:15948 vdb-entry signature
- http://www.adobe.com/support/security/bulletins/apsb09-19.html
- 1023306 vdb-entry
- RHSA-2009:1658 vendor-advisory
- oval:org.mitre.oval:def:7465 vdb-entry signature
- 20091209 ZDI-09-092: Adobe Flash Player JPEG Parsing Heap Overflow Vulnerability mailing-list
- TA09-343A third-party-advisory
- 38241 third-party-advisory
- 37199 vdb-entry
- ADV-2010-0173 vdb-entry