peter bassill · operator
$ cve CVE-2009-1868 JSON

CVE-2009-1868 EXPLOIT

9.3
HIGH · CVSS 2.0 · EPSS 21.4% (pctl 98)

Patch early

A public exploit exists.

Description

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing.

Scoring

CVSS9.3 (HIGH, v2.0)
VectorAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS21.44% — more likely to be exploited than 98% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2009-07-31
Last modified2026-06-16

Affected (3)

VendorProduct
adobeair
adobeflash player
adobeflex

Public exploits

SourceTitleDate
exploit-dbAdobe Flash Player 10.0.22 / AIR - URI Parsing Heap Buffer Overflow (PoC)2009-07-30

References

→ the Explorer  ·  watch your stack  ·  NVD