CVE-2008-4473

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-10-17 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.

Affected products

Adobe Flash Player 24.0.0.186 and earlier.: cs3, mx_2004

References

http://secunia.com/advisories/32246
http://security-assessment.com/files/advisories/2008-10-16_Multiple_Flash_Authoring_Heap_Overflows.pdf
http://securityreason.com/securityalert/4429
http://securitytracker.com/id?1021060
http://www.adobe.com/support/security/advisories/apsa08-09.html
http://www.securityfocus.com/archive/1/497397/100/0/threaded
http://www.securityfocus.com/bid/31769
http://www.vupen.com/english/advisories/2008/2837
https://exchange.xforce.ibmcloud.com/vulnerabilities/45914
http://secunia.com/advisories/32246
http://security-assessment.com/files/advisories/2008-10-16_Multiple_Flash_Authoring_Heap_Overflows.pdf
http://securityreason.com/securityalert/4429

Get alerted when CVE-2008-4473 or the next vulnerability affects your stack