Description
Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 10.0.42.34-1.el5 | RHSA-2009:1657 |
| RHEL 4 | flash-plugin | 9.0.260.0-1.el4 | RHSA-2009:1658 |
| RHEL 3 | flash-plugin | 9.0.260.0-1.el3.with.oss | RHSA-2009:1658 |
Advisories 2
- RHSA-2009:1658 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:1657 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- RHSA-2009:1657 vendor-advisory
- 1023307 vdb-entry
- flash-air-unspecified-overflow(54635) vdb-entry
- oval:org.mitre.oval:def:8208 vdb-entry signature
- 60889 vdb-entry
- http://support.apple.com/kb/HT4004
- 1021716 vendor-advisory
- APPLE-SA-2010-01-19-1 vendor-advisory
- ADV-2009-3456 vdb-entry
- SUSE-SA:2009:062 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=543857
- 37584 third-party-advisory
- http://zerodayinitiative.com/advisories/ZDI-09-093/
- 37902 third-party-advisory
- oval:org.mitre.oval:def:16315 vdb-entry signature
- oval:org.mitre.oval:def:7191 vdb-entry signature
- http://www.adobe.com/support/security/bulletins/apsb09-19.html
- 1023306 vdb-entry
- RHSA-2009:1658 vendor-advisory
- TA09-343A third-party-advisory
- 38241 third-party-advisory
- 20091209 ZDI-09-093: Adobe Flash Player ActionScript Exception Handler Integer Overflow Vulnerability mailing-list
- 37199 vdb-entry
- ADV-2010-0173 vdb-entry