Skip to main content

Adobe Flash Player Unspecified Remote Code Execution Vulnerability

Last Update Date: 28 Jan 2011 Release Date: 28 May 2008 5266 Views

RISK: Medium Risk

A vulnerability has been identified in Adobe Flash Player, which could be exploited by remote attackers to take complete control of an affected system. This issue is caused by an unspecified memory corruption error when processing a malformed SWF file, which could be exploited by attackers to crash an affected browser or execute arbitrary code by tricking a user into visiting a specially crafted web page.

Note:
It has been observed that this issue is being actively exploited in the wild.Continued investigation reveals that this issue is fairly widespread. Malicious code is being injected into other third-party domains, most likely through SQL-injection attacks. The code then redirects users to sites hosting malicious Flash files exploiting this issue.


Impact

  • Remote Code Execution

System / Technologies affected

  • Adobe Flash Player version 9.0.124.0 and prior

Solutions

There is no patch available for this vulnerability currently.


Vulnerability Identifier

  • No CVE information is available

Source


Related Link