CVE-2008-5363

The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF file.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2008-12-08 11:30

Updated : 2024-02-28 11:21


NVD link : CVE-2008-5363

Mitre link : CVE-2008-5363

CVE.ORG link : CVE-2008-5363


JSON object : View

Products Affected

adobe

  • air
  • flash_player
CWE
CWE-399

Resource Management Errors