Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Flash Apsb07 12 | — | Upgrade to Adobe Flash Player version 9.0.48.0 for LinuxUpgrade to Adobe Flash Player version 9.0.47.0 for WindowsUpgrade to Adobe Flash Player version 9.0.47.0 for Mac OS X | Nov 19, 2012 | Jul 11, 2007 |
| Apple Osx Flashplayerplugin | — | Apply OS X security update 2007-008Upgrade macOS to the latest version | Dec 16, 2011 | Jul 11, 2007 |
| Freebsd | — | Upgrade linux-flashplugin | Dec 10, 2025 | Jul 18, 2007 |
| Gentoo Linux | — | Upgrade www-plugins/adobe-flash. | Oct 30, 2017 | Jul 11, 2007 |
| Suse | — | Upgrade suse-releaseUpgrade flash-player | Feb 17, 2015 | Jul 11, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub