Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash...

Vulnerability Description

Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie.

References

• http://www.vupen.com/english/advisories/2006/3573
• http://secunia.com/advisories/22054
• http://www.us-cert.gov/cas/techalerts/TA06-318A.html
• http://secunia.com/advisories/22268
• http://www.vupen.com/english/advisories/2006/4507
• http://www.kb.cert.org/vuls/id/451380
• http://www.securityfocus.com/bid/19980
• http://www.computerterrorism.com/research/ct12-09-2006.htm
• http://secunia.com/advisories/22187
• http://www.vupen.com/english/advisories/2006/3852
• http://secunia.com/advisories/22882
• http://secunia.com/advisories/21865
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28886
• http://lists.apple.com/archives/security-announce/2006/Sep/msg00002.html
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A394
• http://securityreason.com/securityalert/1546
• http://www.securityfocus.com/archive/1/445825/100/0/threaded
• http://www.novell.com/linux/security/advisories/2006_53_flashplayer.html
• http://securitytracker.com/id?1016829
• http://secunia.com/advisories/21901
• http://www.adobe.com/support/security/bulletins/apsb06-11.html
• http://www.redhat.com/support/errata/RHSA-2006-0674.html
• http://www.vupen.com/english/advisories/2006/3577
• http://www.us-cert.gov/cas/techalerts/TA06-275A.html
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-069
• http://security.gentoo.org/glsa/glsa-200610-02.xml