CyberSec.Space Logo
Back to CVE Browser

CVE-2008-4473

CRITICAL
9.3
CVSS Severity Score
EPSS Score0.1040%
EPSS Percentile34.54th
PublishedOct 17, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.

Affected Platforms (CPE)

📦
Adobe

Flash Player

= cs3
📦
Adobe

Flash Player

= mx_2004

References & Advisories

🔗 http://secunia.com/advisories/32246
🔗 http://security-assessment.com/files/advisories/2008-10-16_Multiple_Flash_Authoring_Heap_Overflows.pdf
🔗 http://securityreason.com/securityalert/4429
🔗 http://securitytracker.com/id?1021060
🔗 http://www.adobe.com/support/security/advisories/apsa08-09.html
🔗 http://www.securityfocus.com/archive/1/497397/100/0/threaded
🔗 http://www.securityfocus.com/bid/31769
🔗 http://www.vupen.com/english/advisories/2008/2837

Related Vulnerabilities

CVE-2012-525510.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...

CVE-2012-525610.0

Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11....

CVE-2012-525410.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...

CVE-2012-525710.0

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 ...