Adobe Flash FLA File Processing Remote Code Execution Vulnerabilities
BID:28349
Info
Adobe Flash FLA File Processing Remote Code Execution Vulnerabilities
| Bugtraq ID: | 28349 |
| Class: | Unknown |
| CVE: |
CVE-2008-1201 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 20 2008 12:00AM |
| Updated: | May 07 2008 02:05PM |
| Credit: | cocoruder of Fortinet Security Research Team discovered these issues. |
| Vulnerable: |
Adobe Flash Professional 8 Adobe Flash CS3 Professional 0 Adobe Flash Basic 8 Adobe After Effects CS3 0 |
| Not Vulnerable: | |
Discussion
Adobe Flash FLA File Processing Remote Code Execution Vulnerabilities
Adobe Flash is prone to multiple remote code-execution vulnerabilities.
An attacker may exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
These issues affect Flash CS3 Professional, Flash Professional 8, and Flash Basic 8.
Adobe Flash is prone to multiple remote code-execution vulnerabilities.
An attacker may exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
These issues affect Flash CS3 Professional, Flash Professional 8, and Flash Basic 8.
Exploit / POC
Adobe Flash FLA File Processing Remote Code Execution Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Adobe Flash FLA File Processing Remote Code Execution Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
NOTE: The vendor plans to address these issues in the next major release of Flash Professional and After Effects.
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
NOTE: The vendor plans to address these issues in the next major release of Flash Professional and After Effects.
References
Adobe Flash FLA File Processing Remote Code Execution Vulnerabilities
References:
References: