Integer Overflow in Adobe Flash Player and AIR AVM2 Parser

CVE-2009-1869

Summary

An integer overflow vulnerability exists in the ActionScript Virtual Machine 2 (AVM2) abcFile parser within Adobe Flash Player and Adobe AIR. This flaw can be exploited by attackers to cause a denial of service, leading to application crashes, or potentially execute arbitrary code by crafting a specific AVM2 file with a large intrf_count value. The resultant dereferencing of an out-of-bounds pointer poses significant security risks for affected versions.

References