PoC Index

CVE-2007-0071

HIGH 9.3EPSS 92.5%

Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow.

CVSS v2.0
9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS
92.50% chance of exploitation in the next 30 days, 100th percentile
Published
2008-04-09
Updated
2024-08-07

Proof-of-concept exploits (1)

References

Related