CVE-2009-3797

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-12-10 · updated 2026-06-16
Weakness: CWE-399

Description

Adobe Flash Player 10.x before 10.0.42.34 and Adobe AIR before 1.5.3 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.

Affected products

Adobe Air: through 1.5.2; 1.0, 1.0.1, 1.1, 1.5.1
Adobe Flash Player 24.0.0.186 and earlier.: 10.0.0.584, 10.0.12.10, 10.0.12.36, 10.0.22.87, 10.0.32.18

References

http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html
http://secunia.com/advisories/37584
http://secunia.com/advisories/37902
http://secunia.com/advisories/38241
http://securitytracker.com/id?1023306
http://securitytracker.com/id?1023307
http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021716.1-1
http://support.apple.com/kb/HT4004
http://www.adobe.com/support/security/bulletins/apsb09-19.html
http://www.redhat.com/support/errata/RHSA-2009-1657.html
http://www.securityfocus.com/bid/37199

Get alerted when CVE-2009-3797 or the next vulnerability affects your stack