NVD Vulnerability Detail

CVE-2007-0071

Summary	Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow.
Publication Date	April 10, 2008, 6:05 a.m.
Registration Date	Jan. 29, 2021, 2:04 p.m.
Last Update	Oct. 31, 2018, 1:26 a.m.

CVSS2.0 : HIGH
Score	9.3
Vector	AV:N/AC:M/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
Get all privileges.	はい
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	はい

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:adobe:flash_player::::::::	8.0	8.0.39.0
cpe:2.3:a:adobe:flash_player::::::::	9.0	9.0.115.0

Related information, measures and tools

No	URL	refsource	タグ
1	http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue.html	MISC	Vendor Advisory
2	http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf	MISC	Broken Link
3	http://isc.sans.org/diary.html?storyid=4465	MISC	Third Party Advisory
4	http://lists.apple.com/archives/security-announce/2008//May/msg00001.html	APPLE	Mailing List
5	http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html	SUSE	Third Party Advisory
6	http://secunia.com/advisories/29763	SECUNIA	Third Party Advisory
7	http://secunia.com/advisories/29865	SECUNIA	Third Party Advisory
8	http://secunia.com/advisories/30404	SECUNIA	Third Party Advisory
9	http://secunia.com/advisories/30430	SECUNIA	Third Party Advisory
10	http://secunia.com/advisories/30507	SECUNIA	Third Party Advisory
11	http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1	SUNALERT	Broken Link
12	http://www.adobe.com/support/security/bulletins/apsb08-11.html	CONFIRM	Vendor Advisory
13	http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml	GENTOO	Third Party Advisory
14	http://www.iss.net/threats/289.html	ISS	Broken Link
15	http://www.kb.cert.org/vuls/id/159523	CERT-VN	Third Party Advisory US Government Resource
16	http://www.kb.cert.org/vuls/id/395473	CERT-VN	Third Party Advisory US Government Resource
17	http://www.matasano.com/log/1032/this-new-vulnerability-dowds-inhuman-flash-exploit/	MISC	Third Party Advisory
18	http://www.osvdb.org/44282	OSVDB	Broken Link
19	http://www.redhat.com/support/errata/RHSA-2008-0221.html	REDHAT	Third Party Advisory
20	http://www.securityfocus.com/bid/28695	BID	Third Party Advisory VDB Entry
21	http://www.securityfocus.com/bid/29386	BID	Third Party Advisory VDB Entry
22	http://www.securitytracker.com/id?1019811	SECTRACK	Third Party Advisory VDB Entry
23	http://www.securitytracker.com/id?1020114	SECTRACK	Third Party Advisory VDB Entry
24	http://www.us-cert.gov/cas/techalerts/TA08-100A.html	CERT	Third Party Advisory US Government Resource
25	http://www.us-cert.gov/cas/techalerts/TA08-149A.html	CERT	Third Party Advisory US Government Resource
26	http://www.us-cert.gov/cas/techalerts/TA08-150A.html	CERT	Third Party Advisory US Government Resource
27	http://www.vupen.com/english/advisories/2008/1662/references	VUPEN	Third Party Advisory
28	http://www.vupen.com/english/advisories/2008/1697	VUPEN	Third Party Advisory
29	http://www.vupen.com/english/advisories/2008/1724/references	VUPEN	Third Party Advisory
30	http://www.zerodayinitiative.com/advisories/ZDI-08-032/	MISC	Third Party Advisory VDB Entry
31	https://exchange.xforce.ibmcloud.com/vulnerabilities/37277	XF	Third Party Advisory VDB Entry
32	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10379	OVAL	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-189	数値処理の問題	https://cwe.mitre.org/data/definitions/189.html