NVD脆弱性詳細

CVE-2007-0071

概要	Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow.
公表日	2008年4月10日6:05
登録日	2021年1月29日14:04
最終更新日	2018年10月31日1:26

CVSS2.0 : HIGH
スコア	9.3
ベクター	AV:N/AC:M/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
全ての特権を取得	はい
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	はい

影響を受けるソフトウェアの構成

構成1	以上	以下	より上	未満
cpe:2.3:a:adobe:flash_player::::::::	8.0	8.0.39.0
cpe:2.3:a:adobe:flash_player::::::::	9.0	9.0.115.0

関連情報、対策とツール

No	URL	refsource	タグ
1	http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue.html	MISC	Vendor Advisory
2	http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf	MISC	Broken Link
3	http://isc.sans.org/diary.html?storyid=4465	MISC	Third Party Advisory
4	http://lists.apple.com/archives/security-announce/2008//May/msg00001.html	APPLE	Mailing List
5	http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html	SUSE	Third Party Advisory
6	http://secunia.com/advisories/29763	SECUNIA	Third Party Advisory
7	http://secunia.com/advisories/29865	SECUNIA	Third Party Advisory
8	http://secunia.com/advisories/30404	SECUNIA	Third Party Advisory
9	http://secunia.com/advisories/30430	SECUNIA	Third Party Advisory
10	http://secunia.com/advisories/30507	SECUNIA	Third Party Advisory
11	http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1	SUNALERT	Broken Link
12	http://www.adobe.com/support/security/bulletins/apsb08-11.html	CONFIRM	Vendor Advisory
13	http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml	GENTOO	Third Party Advisory
14	http://www.iss.net/threats/289.html	ISS	Broken Link
15	http://www.kb.cert.org/vuls/id/159523	CERT-VN	Third Party Advisory US Government Resource
16	http://www.kb.cert.org/vuls/id/395473	CERT-VN	Third Party Advisory US Government Resource
17	http://www.matasano.com/log/1032/this-new-vulnerability-dowds-inhuman-flash-exploit/	MISC	Third Party Advisory
18	http://www.osvdb.org/44282	OSVDB	Broken Link
19	http://www.redhat.com/support/errata/RHSA-2008-0221.html	REDHAT	Third Party Advisory
20	http://www.securityfocus.com/bid/28695	BID	Third Party Advisory VDB Entry
21	http://www.securityfocus.com/bid/29386	BID	Third Party Advisory VDB Entry
22	http://www.securitytracker.com/id?1019811	SECTRACK	Third Party Advisory VDB Entry
23	http://www.securitytracker.com/id?1020114	SECTRACK	Third Party Advisory VDB Entry
24	http://www.us-cert.gov/cas/techalerts/TA08-100A.html	CERT	Third Party Advisory US Government Resource
25	http://www.us-cert.gov/cas/techalerts/TA08-149A.html	CERT	Third Party Advisory US Government Resource
26	http://www.us-cert.gov/cas/techalerts/TA08-150A.html	CERT	Third Party Advisory US Government Resource
27	http://www.vupen.com/english/advisories/2008/1662/references	VUPEN	Third Party Advisory
28	http://www.vupen.com/english/advisories/2008/1697	VUPEN	Third Party Advisory
29	http://www.vupen.com/english/advisories/2008/1724/references	VUPEN	Third Party Advisory
30	http://www.zerodayinitiative.com/advisories/ZDI-08-032/	MISC	Third Party Advisory VDB Entry
31	https://exchange.xforce.ibmcloud.com/vulnerabilities/37277	XF	Third Party Advisory VDB Entry
32	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10379	OVAL	Third Party Advisory

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-189	数値処理の問題	https://cwe.mitre.org/data/definitions/189.html