Every CVE Search/ Get API key

CVE-2009-3799

Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10...

9.3 High

Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."

Exploit likelihood

9.96%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."

Record
CVE-2009-3799
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."

Record
CVE-2009-3799
Updated
2026-11-02
EUVDEUVD-2009-3771 No score

Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."

Record
EUVD-2009-3771
Updated
2026-11-03
GitHub AdvisoriesGHSA-7vx4-j5mm-h4p8 No score

Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10...

Integer overflow in the Verifier::parseExceptionHandlers function in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 allows remote attackers to execute arbitrary code via an SWF file with a large exception_count value that triggers memory corruption, related to "generation of ActionScript exception handlers."

Record
GHSA-7vx4-j5mm-h4p8
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
flash-plugin
Red Hat:rhel_extras:5::client
From an advisory covering 6 CVEs
 before 0:10.0.42.34-1.el5
0:10.0.42.34-1.el5
flash-plugin
Red Hat:rhel_extras:5::server
From an advisory covering 6 CVEs
 before 0:10.0.42.34-1.el5
0:10.0.42.34-1.el5
flash-plugin
Red Hat:rhel_extras:3
From an advisory covering 5 CVEs
 before 0:9.0.260.0-1.el3.with.oss
0:9.0.260.0-1.el3.with.oss
flash-plugin
Red Hat:rhel_extras:4
From an advisory covering 5 CVEs
 before 0:9.0.260.0-1.el4
0:9.0.260.0-1.el4

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-3799 is a high vulnerability (CVSS 9.3) in Adobe Air, published December 10, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.96%, the 95th percentile. No source names a fixed version.

References

Show 43 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open