Every CVESearch/Get API key

CVE-2009-1866

Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18,...

9.3 High

CVE-2009-1866 is a high vulnerability (CVSS 9.3) in Adobe Air, published July 31, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.30%, the 94th percentile. No source names a fixed version.

What does this mean?
Severity
9.3 HighCVSS 2.0, NVD
Exploit chance
7.30%EPSS, 94th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.

Exploit likelihood

7.30%Up 0.7 points since Feb 4, 2022
90%50%10%1%

Affected products

Affected packages

Affected packages
PackageAffectedFixed
flash-plugin
Red Hat:rhel_extras:5::client
From an advisory covering 9 CVEs
before 0:10.0.32.18-2.el5
0:10.0.32.18-2.el5
flash-plugin
Red Hat:rhel_extras:5::server
From an advisory covering 9 CVEs
before 0:10.0.32.18-2.el5
0:10.0.32.18-2.el5
flash-plugin
Red Hat:rhel_extras:3
From an advisory covering 9 CVEs
before 0:9.0.246.0-2.el3.with.oss
0:9.0.246.0-2.el3.with.oss
flash-plugin
Red Hat:rhel_extras:4
From an advisory covering 9 CVEs
before 0:9.0.246.0-2.el4
0:9.0.246.0-2.el4

What each source reports

NVD Score used9.3

Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.

Record
CVE-2009-1866
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE ListNo score

Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.

Record
CVE-2009-1866
Updated
2026-11-02
EUVDEUVD-2009-1861No score

Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.

Record
EUVD-2009-1861
Updated
2026-11-03
GitHub AdvisoriesGHSA-f74w-j6qg-22r9No score

Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18,...

Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.

Record
GHSA-f74w-j6qg-22r9
Weakness
CWE-119
Updated
2026-11-02

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 50 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open