VULNERABILITY INTELLIGENCE
CVE-2009-0520
CVSS score9.3 HIGH
EPSS probability28.48%
CISA KEVNot currently listed
Published2009-02-26
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer