CVE-2007-6019

Description

Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly.

Affected products

• Adobe / air1.0 – 1.0
• Adobe / flashbasic – basic
• Adobe / flashprofessional – professional
• Adobe / flashprofessional – professional
• Adobe / Flash Player9.0.115.0
• Adobe / Flash Player7.0 – 7.0
• Adobe / Flash Player7.0.1 – 7.0.1
• Adobe / Flash Player7.0.25 – 7.0.25
• Adobe / Flash Player7.0.63 – 7.0.63
• Adobe / Flash Player7.0.69.0 – 7.0.69.0
• Adobe / Flash Player7.0.70.0 – 7.0.70.0
• Adobe / Flash Player7.0_r67 – 7.0_r67
• Adobe / Flash Player7.1 – 7.1
• Adobe / Flash Player7.1.1 – 7.1.1
• Adobe / Flash Player7.2 – 7.2
• Adobe / Flash Player8 – 8
• Adobe / Flash Player8 – 8
• Adobe / Flash Player8.0 – 8.0
• Adobe / Flash Player8.0 – 8.0
• Adobe / Flash Player8.0 – 8.0
• Adobe / Flash Player8.0.24.0 – 8.0.24.0
• Adobe / Flash Player8.0.34.0 – 8.0.34.0
• Adobe / Flash Player8.0.35.0 – 8.0.35.0
• Adobe / Flash Player8.0.39.0 – 8.0.39.0
• Adobe / Flash Player9.0 – 9.0
• Adobe / Flash Player9.0.16 – 9.0.16
• Adobe / Flash Player9.0.16 – 9.0.16
• Adobe / Flash Player9.0.18d60 – 9.0.18d60
• Adobe / Flash Player9.0.20 – 9.0.20
• Adobe / Flash Player9.0.20.0 – 9.0.20.0
• Adobe / Flash Player9.0.28 – 9.0.28
• Adobe / Flash Player9.0.28.0 – 9.0.28.0
• Adobe / Flash Player9.0.31 – 9.0.31
• Adobe / Flash Player9.0.31.0 – 9.0.31.0
• Adobe / Flash Player9.0.45.0 – 9.0.45.0
• Adobe / Flash Player9.0.47.0 – 9.0.47.0
• Adobe / Flash Player9.0.48.0 – 9.0.48.0
• Adobe / Flash Player9.0.112.0 – 9.0.112.0
• Adobe / Flash Player9.0.114.0 – 9.0.114.0
• Adobe / Flash Player9.0.124.0 – 9.0.124.0
• Adobe / Flash Player9.0.155.0 – 9.0.155.0
• Adobe / flex3.0 – 3.0

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/29865
• MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10160
• VENDOR_ADVISORYhttp://secunia.com/advisories/30507
• MISChttp://www.securitytracker.com/id?1019810
• VENDOR_ADVISORYhttp://www.adobe.com/support/security/bulletins/apsb08-11.html
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/1724/references
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/41717
• MISChttp://www.redhat.com/support/errata/RHSA-2008-0221.html
• MISChttp://securityreason.com/securityalert/3805
• MISChttp://www.us-cert.gov/cas/techalerts/TA08-150A.html
• VENDOR_ADVISORYhttp://secunia.com/advisories/30430
• MAILING_LISThttp://lists.apple.com/archives/security-announce/2008//May/msg00001.html
• MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html
• MISChttp://www.securityfocus.com/archive/1/490824/100/0/threaded
• VENDOR_ADVISORYhttp://secunia.com/advisories/29763
• MISChttp://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1
• MISChttp://www.securityfocus.com/archive/1/490623/100/0/threaded
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-08-021
• MISChttp://www.gentoo.org/security/en/glsa/glsa-200804-21.xml
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/1697
• MISChttp://www.securityfocus.com/bid/28694
• MISChttp://www.us-cert.gov/cas/techalerts/TA08-100A.html