CVE-2008-1201

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 19.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-03-24 · updated 2026-06-16
Weakness: CWE-94

Description

Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary code via a crafted .FLA file.

Affected products

Adobe Flash: basic-8, professional-8, professional-cs3

References

http://ruder.cdut.net/blogview.asp?logID=241
http://secunia.com/advisories/29455
http://www.adobe.com/support/security/advisories/apsa08-03.html
http://www.fortiguardcenter.com/advisory/FGA-2008-07.html
http://www.securityfocus.com/bid/28349
http://www.securitytracker.com/id?1019681
http://www.vupen.com/english/advisories/2008/0948/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41327
http://ruder.cdut.net/blogview.asp?logID=241
http://secunia.com/advisories/29455
http://www.adobe.com/support/security/advisories/apsa08-03.html
http://www.fortiguardcenter.com/advisory/FGA-2008-07.html

Get alerted when CVE-2008-1201 or the next vulnerability affects your stack