VULNERABILITY INTELLIGENCE
CVE-2008-4473
CVSS score9.3 HIGH
EPSS probability7.92%
CISA KEVNot currently listed
Published2008-10-17
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer