PT-2006-4462 · Adobe · Flash Player

Haifei Li · Published 2006-07-13 · Updated 2018-10-12 · CVE-2006-3587

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Flash Player version 8.0.24.0

Description The issue is related to an unspecified vulnerability that allows remote attackers to execute arbitrary commands. This is achieved by using a malformed .swf file, which results in multiple improper memory access errors.

Recommendations For Adobe Flash Player version 8.0.24.0, update to a version that contains a fix for this issue to prevent remote attackers from executing arbitrary commands.

Fix

Related Identifiers

CVE-2006-3587

Affected Products

Flash Player

References · 30

• http://vupen.com/english/advisories/2006/3577 · Vendor Advisory
• http://vupen.com/english/advisories/2006/4507 · Vendor Advisory
• http://vupen.com/english/advisories/2006/3573 · Vendor Advisory
• http://secunia.com/advisories/20971 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html · Vendor Advisory
• http://secunia.com/advisories/22882 · Vendor Advisory
• http://secunia.com/advisories/21865 · Vendor Advisory
• http://fortinet.com/FortiGuardCenter/advisory/FG-2006-20.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200610-02.xml · Vendor Advisory
• http://secunia.com/advisories/22187 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_53_flashplayer.html · Vendor Advisory
• http://kb.cert.org/vuls/id/474593 · Patch
• http://secunia.com/advisories/22054 · Vendor Advisory
• http://vupen.com/english/advisories/2006/2702 · Vendor Advisory
• http://secunia.com/advisories/21901 · Vendor Advisory