← Database

CVE-2009-0520

CRITICAL CVSS: 9.3 Published: 2009-02-26 Modified: 2026-06-16

Description

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."

Affected Platforms

Adobe Flash PlayerAdobe AirAdobe Flash Player For LinuxAdobe Flex

Weakness Type

CWE-119

References