CVE-2007-3456 (GCVE-0-2007-3456)

Vulnerability from cvelistv5 – Published: 2007-07-11 16:00 – Updated: 2024-08-07 14:21
VLAI
Summary
Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
References
URL Tags
http://secunia.com/advisories/28068 third-party-advisoryx_refsource_SECUNIA
http://www.securitytracker.com/id?1018359 vdb-entryx_refsource_SECTRACK
https://rhn.redhat.com/errata/RHSA-2007-0696.html vendor-advisoryx_refsource_REDHAT
http://secunia.com/advisories/26357 third-party-advisoryx_refsource_SECUNIA
http://www.novell.com/linux/security/advisories/2… vendor-advisoryx_refsource_SUSE
http://sunsolve.sun.com/search/document.do?assetk… vendor-advisoryx_refsource_SUNALERT
http://osvdb.org/38054 vdb-entryx_refsource_OSVDB
http://www.vupen.com/english/advisories/2007/4190 vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/26444 vdb-entryx_refsource_BID
http://www.gentoo.org/security/en/glsa/glsa-20070… vendor-advisoryx_refsource_GENTOO
http://secunia.com/advisories/26027 third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://www.us-cert.gov/cas/techalerts/TA07-192A.html third-party-advisoryx_refsource_CERT
http://www.mindedsecurity.com/labs/advisories/MSA… x_refsource_MISC
http://secunia.com/advisories/26118 third-party-advisoryx_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/def… vdb-entrysignaturex_refsource_OVAL
http://lists.apple.com/archives/security-announce… vendor-advisoryx_refsource_APPLE
http://docs.info.apple.com/article.html?artnum=307041 x_refsource_CONFIRM
http://www.kb.cert.org/vuls/id/730785 third-party-advisoryx_refsource_CERT-VN
http://www.securityfocus.com/archive/1/473655/100… mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2007/3868 vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/24856 vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2007/2497 vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/archive/1/474248/30/… mailing-listx_refsource_BUGTRAQ
http://sunsolve.sun.com/search/document.do?assetk… vendor-advisoryx_refsource_SUNALERT
http://secunia.com/advisories/27643 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/26057 third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/474163/100… mailing-listx_refsource_BUGTRAQ
http://www.us-cert.gov/cas/techalerts/TA07-319A.html third-party-advisoryx_refsource_CERT
http://www.adobe.com/support/security/bulletins/a… x_refsource_CONFIRM
Date Public
2007-07-10 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T14:21:34.935Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "28068",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/28068"
          },
          {
            "name": "1018359",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018359"
          },
          {
            "name": "RHSA-2007:0696",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://rhn.redhat.com/errata/RHSA-2007-0696.html"
          },
          {
            "name": "26357",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26357"
          },
          {
            "name": "SUSE-SA:2007:046",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html"
          },
          {
            "name": "201506",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1"
          },
          {
            "name": "38054",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/38054"
          },
          {
            "name": "ADV-2007-4190",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4190"
          },
          {
            "name": "26444",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26444"
          },
          {
            "name": "GLSA-200708-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml"
          },
          {
            "name": "26027",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26027"
          },
          {
            "name": "flashplayer-swf-code-execution(35337)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35337"
          },
          {
            "name": "TA07-192A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-192A.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.mindedsecurity.com/labs/advisories/MSA01110707"
          },
          {
            "name": "26118",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26118"
          },
          {
            "name": "oval:org.mitre.oval:def:11493",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11493"
          },
          {
            "name": "APPLE-SA-2007-11-14",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=307041"
          },
          {
            "name": "VU#730785",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/730785"
          },
          {
            "name": "20070713 [MSA01110707] Flash Player/Plugin Video file parsing Remote CodeExecution",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/473655/100/0/threaded"
          },
          {
            "name": "ADV-2007-3868",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3868"
          },
          {
            "name": "24856",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/24856"
          },
          {
            "name": "ADV-2007-2497",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2497"
          },
          {
            "name": "20070720 FLEA-2007-0032-1: flashplayer",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/474248/30/5760/threaded"
          },
          {
            "name": "103167",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUNALERT",
              "x_transferred"
            ],
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1"
          },
          {
            "name": "27643",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27643"
          },
          {
            "name": "26057",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26057"
          },
          {
            "name": "20070719 Wii\u0027s Internet Channel affected to Flash FLV parser vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/474163/100/200/threaded"
          },
          {
            "name": "TA07-319A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-319A.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb07-12.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an \"input validation error,\" including a signed comparison of values that are assumed to be non-negative."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "28068",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/28068"
        },
        {
          "name": "1018359",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018359"
        },
        {
          "name": "RHSA-2007:0696",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://rhn.redhat.com/errata/RHSA-2007-0696.html"
        },
        {
          "name": "26357",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26357"
        },
        {
          "name": "SUSE-SA:2007:046",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html"
        },
        {
          "name": "201506",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1"
        },
        {
          "name": "38054",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/38054"
        },
        {
          "name": "ADV-2007-4190",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/4190"
        },
        {
          "name": "26444",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26444"
        },
        {
          "name": "GLSA-200708-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml"
        },
        {
          "name": "26027",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26027"
        },
        {
          "name": "flashplayer-swf-code-execution(35337)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35337"
        },
        {
          "name": "TA07-192A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-192A.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.mindedsecurity.com/labs/advisories/MSA01110707"
        },
        {
          "name": "26118",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26118"
        },
        {
          "name": "oval:org.mitre.oval:def:11493",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11493"
        },
        {
          "name": "APPLE-SA-2007-11-14",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=307041"
        },
        {
          "name": "VU#730785",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/730785"
        },
        {
          "name": "20070713 [MSA01110707] Flash Player/Plugin Video file parsing Remote CodeExecution",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/473655/100/0/threaded"
        },
        {
          "name": "ADV-2007-3868",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3868"
        },
        {
          "name": "24856",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/24856"
        },
        {
          "name": "ADV-2007-2497",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2497"
        },
        {
          "name": "20070720 FLEA-2007-0032-1: flashplayer",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/474248/30/5760/threaded"
        },
        {
          "name": "103167",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUNALERT"
          ],
          "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1"
        },
        {
          "name": "27643",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27643"
        },
        {
          "name": "26057",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26057"
        },
        {
          "name": "20070719 Wii\u0027s Internet Channel affected to Flash FLV parser vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/474163/100/200/threaded"
        },
        {
          "name": "TA07-319A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-319A.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.adobe.com/support/security/bulletins/apsb07-12.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-3456",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an \"input validation error,\" including a signed comparison of values that are assumed to be non-negative."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "28068",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/28068"
            },
            {
              "name": "1018359",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018359"
            },
            {
              "name": "RHSA-2007:0696",
              "refsource": "REDHAT",
              "url": "https://rhn.redhat.com/errata/RHSA-2007-0696.html"
            },
            {
              "name": "26357",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26357"
            },
            {
              "name": "SUSE-SA:2007:046",
              "refsource": "SUSE",
              "url": "http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html"
            },
            {
              "name": "201506",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1"
            },
            {
              "name": "38054",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/38054"
            },
            {
              "name": "ADV-2007-4190",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/4190"
            },
            {
              "name": "26444",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26444"
            },
            {
              "name": "GLSA-200708-01",
              "refsource": "GENTOO",
              "url": "http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml"
            },
            {
              "name": "26027",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26027"
            },
            {
              "name": "flashplayer-swf-code-execution(35337)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35337"
            },
            {
              "name": "TA07-192A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA07-192A.html"
            },
            {
              "name": "http://www.mindedsecurity.com/labs/advisories/MSA01110707",
              "refsource": "MISC",
              "url": "http://www.mindedsecurity.com/labs/advisories/MSA01110707"
            },
            {
              "name": "26118",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26118"
            },
            {
              "name": "oval:org.mitre.oval:def:11493",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11493"
            },
            {
              "name": "APPLE-SA-2007-11-14",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=307041",
              "refsource": "CONFIRM",
              "url": "http://docs.info.apple.com/article.html?artnum=307041"
            },
            {
              "name": "VU#730785",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/730785"
            },
            {
              "name": "20070713 [MSA01110707] Flash Player/Plugin Video file parsing Remote CodeExecution",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/473655/100/0/threaded"
            },
            {
              "name": "ADV-2007-3868",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3868"
            },
            {
              "name": "24856",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/24856"
            },
            {
              "name": "ADV-2007-2497",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2497"
            },
            {
              "name": "20070720 FLEA-2007-0032-1: flashplayer",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/474248/30/5760/threaded"
            },
            {
              "name": "103167",
              "refsource": "SUNALERT",
              "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1"
            },
            {
              "name": "27643",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27643"
            },
            {
              "name": "26057",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26057"
            },
            {
              "name": "20070719 Wii\u0027s Internet Channel affected to Flash FLV parser vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/474163/100/200/threaded"
            },
            {
              "name": "TA07-319A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA07-319A.html"
            },
            {
              "name": "http://www.adobe.com/support/security/bulletins/apsb07-12.html",
              "refsource": "CONFIRM",
              "url": "http://www.adobe.com/support/security/bulletins/apsb07-12.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-3456",
    "datePublished": "2007-07-11T16:00:00.000Z",
    "dateReserved": "2007-06-26T00:00:00.000Z",
    "dateUpdated": "2024-08-07T14:21:34.935Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-3456",
      "date": "2026-09-21",
      "epss": "0.56309",
      "percentile": "0.99034"
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5F93205D-6194-40BB-B691-0B3CA943FE5B",
                    "versionEndIncluding": "9.0.45.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F35F86B6-D49A-40F4-BFFA-5D6BBA2F7D8B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*",
                    "matchCriteriaId": "600DDA9D-6440-48D1-8539-7127398A8678",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*",
                    "matchCriteriaId": "B4D5E27C-F6BF-4F84-9B83-6AEC98B4AA14",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "934A869D-D58D-4C36-B86E-013F62790585",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*",
                    "matchCriteriaId": "ACFA6611-99DA-48B0-89F7-DD99B8E30334",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "59AF804B-BD7A-4AD7-AD44-B5D980443B8B",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F5D52F86-2E38-4C66-9939-7603367B8D0E",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0557AA2A-FA3A-460A-8F03-DC74B149CA3D",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an \"input validation error,\" including a signed comparison of values that are assumed to be non-negative."
          },
          {
            "lang": "es",
            "value": "El desbordamiento de enteros en Adobe Flash Player versiones 9.0.45.0 y anteriores, podr\u00eda permitir a los atacantes remotos ejecutar c\u00f3digo arbitrario por medio de un valor de longitud grande para un (1) cadena larga o (2) tipo de variable XML en un archivo creado (a) FLV o (b) SWF, relacionado con un \"input validation error\" incluyendo una comparaci\u00f3n firmada de valores que se supone que no son negativos"
          }
        ],
        "id": "CVE-2007-3456",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 9.3,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 10.0,
              "obtainAllPrivilege": true,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": true
            }
          ]
        },
        "published": "2007-07-11T16:30:00.000",
        "references": [
          {
            "source": "cve@mitre.org",
            "url": "http://docs.info.apple.com/article.html?artnum=307041"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://osvdb.org/38054"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/26027"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/26057"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/26118"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/26357"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/27643"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/28068"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb07-12.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/730785"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.mindedsecurity.com/labs/advisories/MSA01110707"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/473655/100/0/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/474163/100/200/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/archive/1/474248/30/5760/threaded"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/24856"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securityfocus.com/bid/26444"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.securitytracker.com/id?1018359"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-192A.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-319A.html"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2497"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3868"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4190"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35337"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11493"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://rhn.redhat.com/errata/RHSA-2007-0696.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://docs.info.apple.com/article.html?artnum=307041"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://osvdb.org/38054"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/26027"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/26057"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/26118"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/26357"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/27643"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/28068"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.adobe.com/support/security/bulletins/apsb07-12.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/730785"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mindedsecurity.com/labs/advisories/MSA01110707"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/473655/100/0/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/474163/100/200/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/archive/1/474248/30/5760/threaded"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/24856"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/26444"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securitytracker.com/id?1018359"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-192A.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-319A.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2497"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3868"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/4190"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35337"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11493"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://rhn.redhat.com/errata/RHSA-2007-0696.html"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-189"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Critical",
      "current_release_date": "2026-06-28T06:44:24+00:00",
      "cve": "CVE-2007-3456",
      "id": "CVE-2007-3456",
      "initial_release_date": "2007-07-10T00:00:00+00:00",
      "product_status:fixed": "10",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "flash-plugin input validation flaw",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2007/cve-2007-3456.json",
      "version": "3"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.