CVE-2007-3456
What it is
Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.
At a glance
- Exploitability
- Can be exploited over the network without logging in. High risk of data exposure, data tampering, service disruption.
- Exploit odds
- 47.7% chance of exploitation in the next 30 days (EPSS). Higher than most.
- Fix
- A patch, advisory or fixed version is referenced. Upgrade or apply it.
Timeline
- ReservedThe CVE id was reserved by its CNA
- PublishedDisclosed publicly on CVE.org and NVD
- Last updatedMost recent change to the record
Why it ranks here
- Exploited in the wild: no, CISA does not list it.
- Exploit odds: 47.7% in the next 30 days (EPSS).
- Severity: 9.3 HIGH (CVSS).
- Fix: a patch or advisory is linked.
- It meets the bar for Drop everything: critical, and exploited or very likely to be.
Details
- Published
- Last modified
- Exploit probability
- 47.7% · EPSS, next 30 days
- Weakness
- CWE-189
- Record status
- Modified
Affected
- Adobe Flash Player ≤ 9.0.45.0
- Adobe Flash Player 9.0.16
- Adobe Flash Player 9.0.18d60
- Adobe Flash Player 9.0.20
- Adobe Flash Player 9.0.20.0
- Adobe Flash Player 9.0.28
- Adobe Flash Player 9.0.28.0
- Adobe Flash Player 9.0.31
Attack profile CVSS 2.0 · 9.3
- Attack vector
- Network
- Complexity
- Medium
- Authentication
- None
- Confidentiality
- Complete
- Integrity
- Complete
- Availability
- Complete
Raw vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Is it in your code?
Hand this to your coding agent. It searches your project for the affected products and checks versions. Nothing leaves your machine.
Read https://cve-list.com/agent/cve/CVE-2007-3456.md and follow it. Check whether this project is affected by CVE-2007-3456. Read only. Don't change anything and don't upload my code. Tell me yes, no or not sure, with the file as proof.
Fix and advisories
- http://secunia.com/advisories/26027
- http://secunia.com/advisories/26057
- http://secunia.com/advisories/26118
- http://secunia.com/advisories/26357
- http://secunia.com/advisories/27643
- http://secunia.com/advisories/28068
- http://www.adobe.com/support/security/bulletins/apsb07-12.html
- http://www.vupen.com/english/advisories/2007/2497
- http://www.vupen.com/english/advisories/2007/3868
- http://www.vupen.com/english/advisories/2007/4190
References
- http://docs.info.apple.com/article.html?artnum=307041
- http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html
- http://osvdb.org/38054
- http://secunia.com/advisories/26027
- http://secunia.com/advisories/26057
- http://secunia.com/advisories/26118
- http://secunia.com/advisories/26357
- http://secunia.com/advisories/27643
- http://secunia.com/advisories/28068
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1
- http://www.adobe.com/support/security/bulletins/apsb07-12.html
- http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml
- http://www.kb.cert.org/vuls/id/730785
- http://www.mindedsecurity.com/labs/advisories/MSA01110707
- http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html
- http://www.securityfocus.com/archive/1/473655/100/0/threaded
- http://www.securityfocus.com/archive/1/474163/100/200/threaded
- http://www.securityfocus.com/archive/1/474248/30/5760/threaded
- http://www.securityfocus.com/bid/24856
- http://www.securityfocus.com/bid/26444
- http://www.securitytracker.com/id?1018359
- http://www.us-cert.gov/cas/techalerts/TA07-192A.html
- http://www.us-cert.gov/cas/techalerts/TA07-319A.html
- http://www.vupen.com/english/advisories/2007/2497