Vulnerability Details CVE-2009-0520
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.161
EPSS Ranking 94.5%
CVSS Severity
CVSS v2 Score 9.3
Products affected by CVE-2009-0520
-
-
cpe:2.3:a:adobe:flash_player:-
-
cpe:2.3:a:adobe:flash_player:10
-
cpe:2.3:a:adobe:flash_player:10.0.0.584
-
cpe:2.3:a:adobe:flash_player:10.0.12.10
-
cpe:2.3:a:adobe:flash_player:10.0.12.36
-
cpe:2.3:a:adobe:flash_player:10.0.2.54
-
cpe:2.3:a:adobe:flash_player:2
-
cpe:2.3:a:adobe:flash_player:3
-
cpe:2.3:a:adobe:flash_player:4
-
cpe:2.3:a:adobe:flash_player:5
-
cpe:2.3:a:adobe:flash_player:6
-
cpe:2.3:a:adobe:flash_player:6.0.21.0
-
cpe:2.3:a:adobe:flash_player:6.0.79
-
cpe:2.3:a:adobe:flash_player:7
-
cpe:2.3:a:adobe:flash_player:7.0
-
cpe:2.3:a:adobe:flash_player:7.0.1
-
cpe:2.3:a:adobe:flash_player:7.0.14.0
-
cpe:2.3:a:adobe:flash_player:7.0.19.0
-
cpe:2.3:a:adobe:flash_player:7.0.24.0
-
cpe:2.3:a:adobe:flash_player:7.0.25
-
cpe:2.3:a:adobe:flash_player:7.0.53.0
-
cpe:2.3:a:adobe:flash_player:7.0.60.0
-
cpe:2.3:a:adobe:flash_player:7.0.61.0
-
cpe:2.3:a:adobe:flash_player:7.0.63
-
cpe:2.3:a:adobe:flash_player:7.0.66.0
-
cpe:2.3:a:adobe:flash_player:7.0.67.0
-
cpe:2.3:a:adobe:flash_player:7.0.68.0
-
cpe:2.3:a:adobe:flash_player:7.0.69.0
-
cpe:2.3:a:adobe:flash_player:7.0.70.0
-
cpe:2.3:a:adobe:flash_player:7.0.73.0
-
cpe:2.3:a:adobe:flash_player:7.1
-
cpe:2.3:a:adobe:flash_player:7.1.1
-
cpe:2.3:a:adobe:flash_player:7.2
-
cpe:2.3:a:adobe:flash_player:8
-
cpe:2.3:a:adobe:flash_player:8.0
-
cpe:2.3:a:adobe:flash_player:8.0.22.0
-
cpe:2.3:a:adobe:flash_player:8.0.24.0
-
cpe:2.3:a:adobe:flash_player:8.0.33.0
-
cpe:2.3:a:adobe:flash_player:8.0.34.0
-
cpe:2.3:a:adobe:flash_player:8.0.35.0
-
cpe:2.3:a:adobe:flash_player:8.0.39.0
-
cpe:2.3:a:adobe:flash_player:8.0.42.0
-
cpe:2.3:a:adobe:flash_player:9
-
cpe:2.3:a:adobe:flash_player:9.0
-
cpe:2.3:a:adobe:flash_player:9.0.112.0
-
cpe:2.3:a:adobe:flash_player:9.0.114.0
-
cpe:2.3:a:adobe:flash_player:9.0.115.0
-
cpe:2.3:a:adobe:flash_player:9.0.124.0
-
cpe:2.3:a:adobe:flash_player:9.0.125.0
-
cpe:2.3:a:adobe:flash_player:9.0.151.0
-
cpe:2.3:a:adobe:flash_player:9.0.152.0
-
cpe:2.3:a:adobe:flash_player:9.0.155.0
-
cpe:2.3:a:adobe:flash_player:9.0.159.0
-
cpe:2.3:a:adobe:flash_player:9.0.16
-
cpe:2.3:a:adobe:flash_player:9.0.16.0
-
cpe:2.3:a:adobe:flash_player:9.0.18d60
-
cpe:2.3:a:adobe:flash_player:9.0.20
-
cpe:2.3:a:adobe:flash_player:9.0.20.0
-
cpe:2.3:a:adobe:flash_player:9.0.246.0
-
cpe:2.3:a:adobe:flash_player:9.0.260.0
-
cpe:2.3:a:adobe:flash_player:9.0.262.0
-
cpe:2.3:a:adobe:flash_player:9.0.277.0
-
cpe:2.3:a:adobe:flash_player:9.0.28
-
cpe:2.3:a:adobe:flash_player:9.0.28.0
-
cpe:2.3:a:adobe:flash_player:9.0.280
-
cpe:2.3:a:adobe:flash_player:9.0.283.0
-
cpe:2.3:a:adobe:flash_player:9.0.289.0
-
cpe:2.3:a:adobe:flash_player:9.0.31
-
cpe:2.3:a:adobe:flash_player:9.0.31.0
-
cpe:2.3:a:adobe:flash_player:9.0.45.0
-
cpe:2.3:a:adobe:flash_player:9.0.47.0
-
cpe:2.3:a:adobe:flash_player:9.0.48.0
-
cpe:2.3:a:adobe:flash_player:9.0.8.0
-
cpe:2.3:a:adobe:flash_player:9.0.9.0
-
cpe:2.3:a:adobe:flash_player:9.125.0
-
cpe:2.3:a:adobe:flash_player:cs3
-
cpe:2.3:a:adobe:flash_player:cs4
-
cpe:2.3:a:adobe:flash_player_for_linux:10.0.12.36
-
cpe:2.3:a:adobe:flash_player_for_linux:9.0.115.0
-
cpe:2.3:a:adobe:flash_player_for_linux:9.0.124.0
-
cpe:2.3:a:adobe:flash_player_for_linux:9.0.151.0
-
cpe:2.3:a:adobe:flash_player_for_linux:9.0.31
-
cpe:2.3:a:adobe:flash_player_for_linux:9.0.48.0
-