CVE-2008-5363

The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF file.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:53

Type Values Removed Values Added
References () http://secunia.com/advisories/33390 - Third Party Advisory () http://secunia.com/advisories/33390 - Third Party Advisory
References () http://secunia.com/advisories/34226 - Third Party Advisory () http://secunia.com/advisories/34226 - Third Party Advisory
References () http://security.gentoo.org/glsa/glsa-200903-23.xml - Third Party Advisory () http://security.gentoo.org/glsa/glsa-200903-23.xml - Third Party Advisory
References () http://securityreason.com/securityalert/4692 - Third Party Advisory () http://securityreason.com/securityalert/4692 - Third Party Advisory
References () http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 - Broken Link () http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 - Broken Link
References () http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - Third Party Advisory () http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm - Third Party Advisory
References () http://www.adobe.com/support/security/bulletins/apsb08-22.html - Patch, Vendor Advisory () http://www.adobe.com/support/security/bulletins/apsb08-22.html - Patch, Vendor Advisory
References () http://www.isecpartners.com/advisories/2008-01-flash.txt - Third Party Advisory () http://www.isecpartners.com/advisories/2008-01-flash.txt - Third Party Advisory
References () http://www.securityfocus.com/archive/1/498561/100/0/threaded - Third Party Advisory, VDB Entry () http://www.securityfocus.com/archive/1/498561/100/0/threaded - Third Party Advisory, VDB Entry

Information

Published : 2008-12-08 11:30

Updated : 2024-11-21 00:53


NVD link : CVE-2008-5363

Mitre link : CVE-2008-5363

CVE.ORG link : CVE-2008-5363


JSON object : View

Products Affected

adobe

  • air
  • flash_player
CWE
CWE-399

Resource Management Errors