Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before…

Description

Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.

Scores

EPSS (exploitation in 30 days)

19.7% · top 2.6% of all CVEs (5 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 9.3.

Weakness

• n/a
• CWE-189 (opens in a new tab)All about CWE-189 and its CVEs

Affected products

• n/a

  • affected n/a

References (22)

• 266108 (opens in a new tab)vendor-advisoryx_refsource_SUNALERTx_transferred
• APPLE-SA-2009-09-10-1 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
• GLSA-200908-04 (opens in a new tab)vendor-advisoryx_refsource_GENTOOx_transferred
• http://support.apple.com/kb/HT3864 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 35907 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• http://www.adobe.com/support/security/bulletins/apsb09-13.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 1022629 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• APPLE-SA-2009-09-10-2 (opens in a new tab)vendor-advisoryx_refsource_APPLEx_transferred
• 20090802 Advisory: Adobe Flash Player and AIR AVM2 intf_count Integer Overflow Remote Code Execution (CVE-2009-1869) (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• flash-air-code-execution(52181) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• ADV-2009-2086 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 35890 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• http://www.adobe.com/support/security/bulletins/apsb09-10.html (opens in a new tab)x_refsource_CONFIRMx_transferred
• 36374 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://roeehay.blogspot.com/2009/08/exploitation-of-cve-2009-1869.html (opens in a new tab)x_refsource_MISCx_transferred
• oval:org.mitre.oval:def:6998 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred
• http://support.apple.com/kb/HT3865 (opens in a new tab)x_refsource_CONFIRMx_transferred
• 36193 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 56777 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 36701 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• http://roeehay.blogspot.com/2009/08/advisory-adobe-flash-player-avm2.html (opens in a new tab)x_refsource_MISCx_transferred
• oval:org.mitre.oval:def:15994 (opens in a new tab)vdb-entrysignaturex_refsource_OVALx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2009-1869](https://trackcve.app/badge/CVE-2009-1869.svg)](https://trackcve.app/cve/CVE-2009-1869)

Record last updated 7 Aug 2024, 05:27 UTC.