Description
Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly.
Affected products
- Adobe / air1.0 – 1.0
- Adobe / flashbasic – basic
- Adobe / flashprofessional – professional
- Adobe / flashprofessional – professional
- Adobe / Flash Player9.0.115.0
- Adobe / Flash Player7.0 – 7.0
- Adobe / Flash Player7.0.1 – 7.0.1
- Adobe / Flash Player7.0.25 – 7.0.25
- Adobe / Flash Player7.0.63 – 7.0.63
- Adobe / Flash Player7.0.69.0 – 7.0.69.0
- Adobe / Flash Player7.0.70.0 – 7.0.70.0
- Adobe / Flash Player7.0_r67 – 7.0_r67
- Adobe / Flash Player7.1 – 7.1
- Adobe / Flash Player7.1.1 – 7.1.1
- Adobe / Flash Player7.2 – 7.2
- Adobe / Flash Player8 – 8
- Adobe / Flash Player8 – 8
- Adobe / Flash Player8.0 – 8.0
- Adobe / Flash Player8.0 – 8.0
- Adobe / Flash Player8.0 – 8.0
- Adobe / Flash Player8.0.24.0 – 8.0.24.0
- Adobe / Flash Player8.0.34.0 – 8.0.34.0
- Adobe / Flash Player8.0.35.0 – 8.0.35.0
- Adobe / Flash Player8.0.39.0 – 8.0.39.0
- Adobe / Flash Player9.0 – 9.0
- Adobe / Flash Player9.0.16 – 9.0.16
- Adobe / Flash Player9.0.16 – 9.0.16
- Adobe / Flash Player9.0.18d60 – 9.0.18d60
- Adobe / Flash Player9.0.20 – 9.0.20
- Adobe / Flash Player9.0.20.0 – 9.0.20.0
- Adobe / Flash Player9.0.28 – 9.0.28
- Adobe / Flash Player9.0.28.0 – 9.0.28.0
- Adobe / Flash Player9.0.31 – 9.0.31
- Adobe / Flash Player9.0.31.0 – 9.0.31.0
- Adobe / Flash Player9.0.45.0 – 9.0.45.0
- Adobe / Flash Player9.0.47.0 – 9.0.47.0
- Adobe / Flash Player9.0.48.0 – 9.0.48.0
- Adobe / Flash Player9.0.112.0 – 9.0.112.0
- Adobe / Flash Player9.0.114.0 – 9.0.114.0
- Adobe / Flash Player9.0.124.0 – 9.0.124.0
- Adobe / Flash Player9.0.155.0 – 9.0.155.0
- Adobe / flex3.0 – 3.0
Exploits & proofs of concept
- exploit-dbAdobe Flash Player 8/9.0.x - '.SWF' File 'DeclareFunction2' ActionScript Tag Remote Code Executionby Javier Vicente Vallejo
References
- VENDOR_ADVISORYhttp://secunia.com/advisories/29865
- MISChttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10160
- VENDOR_ADVISORYhttp://secunia.com/advisories/30507
- MISChttp://www.securitytracker.com/id?1019810
- VENDOR_ADVISORYhttp://www.adobe.com/support/security/bulletins/apsb08-11.html
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/1724/references
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/41717
- MISChttp://www.redhat.com/support/errata/RHSA-2008-0221.html
- MISChttp://securityreason.com/securityalert/3805
- MISChttp://www.us-cert.gov/cas/techalerts/TA08-150A.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/30430
- MAILING_LISThttp://lists.apple.com/archives/security-announce/2008//May/msg00001.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html
- MISChttp://www.securityfocus.com/archive/1/490824/100/0/threaded
- VENDOR_ADVISORYhttp://secunia.com/advisories/29763
- MISChttp://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1
- MISChttp://www.securityfocus.com/archive/1/490623/100/0/threaded
- VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-08-021
- MISChttp://www.gentoo.org/security/en/glsa/glsa-200804-21.xml
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/1697
- MISChttp://www.securityfocus.com/bid/28694
- MISChttp://www.us-cert.gov/cas/techalerts/TA08-100A.html
Updated 25m ago · 8 sources