CVE-2007-3456

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

56.31% chance of exploitation in the next 30 days, 99th percentile

Published

2007-07-11

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30288

References

• CVE Record
• NVD entry

Related

• CVE-2007-3452
• CVE-2007-3459
• CVE-2007-3451
• CVE-2007-3460
• CVE-2007-3450
• CVE-2007-3461