CVE-2009-4003
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-4003
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple integer overflows in Adobe Shockwave Player before 11.5.6.606 allow remote attackers to execute arbitrary code via (1) an unspecified block type in a Shockwave file, leading to a heap-based buffer overflow; and might allow remote attackers to execute arbitrary code via (2) an unspecified 3D block in a Shockwave file, leading to memory corruption; or (3) a crafted 3D model in a Shockwave file, leading to heap memory corruption.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Adobe Shockwave Player多个整数溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Adobe Shockwave Player 11.5.6.606之前的版本中存在多个整数溢出，远程攻击者可以借助(1)一个Shockwave文件中的未明阻碍类型, 导致一个堆缓冲溢出执行任意代码；远程攻击者还可能借助(2)一个Shockwave文件中的一个未明3D阻碍,导致内存损坏;或(3)一个Shockwave文件中的一个人工3D模型,导致堆存储损坏，执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-4003
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-4003
请登录查看更多情报信息。
- http://secunia.com/secunia_research/2009-63/x_refsource_MISC
- http://www.adobe.com/support/security/bulletins/apsb10-03.htmlx_refsource_CONFIRM
- http://secunia.com/secunia_research/2010-1/x_refsource_MISC
- http://secunia.com/secunia_research/2009-62/x_refsource_MISC
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8538vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2009-4003
Same Patch Batch · n/a · 2010-01-21 · 19 CVEs total
| CVE-2010-0375 | JCE-Tech PHP Calendars product_list.php SQL注入漏洞 | |
| CVE-2010-0232 | Microsoft Windows #GP陷阱处理器本地权限提升漏洞 | |
| CVE-2009-4002 | Adobe Shockwave Player远程缓冲区溢出漏洞 | |
| CVE-2010-0367 | BitScripts Bits 视频脚本 多个PHP远程文件包含漏洞 | |
| CVE-2010-0366 | Bits Video Script 任意文件上传漏洞 | |
| CVE-2010-0365 | BitScripts Bits 视频脚本 search.php 跨站脚本漏洞 | |
| CVE-2010-0364 | Videolan VLC媒体播放器ASS文件解析缓冲区溢出漏洞 | |
| CVE-2010-0377 | PHP MySpace Gold Edition "modules/arcade/index.php" SQL注入漏洞 | |
| CVE-2010-0376 | JCE-Tech PHP Calendars product_list.php 跨站脚本攻击漏洞 | |
| CVE-2010-0378 | Adobe Flash Player Use-after-free 漏洞 | |
| CVE-2010-0374 | Joomla! 'com_marketplace'组件'catid'参数跨站脚本攻击漏洞 | |
| CVE-2010-0373 | Joomla! libros 组件 SQL注入漏洞 | |
| CVE-2010-0372 | Joomla! 'com_articlemanager'组件'artid'参数SQL注入漏洞 | |
| CVE-2010-0371 | Hitmaaan Gallery index.php 多个跨站脚本漏洞 | |
| CVE-2010-0370 | Drupal Node Block 模块 跨站脚本漏洞 | |
| CVE-2010-0138 | CiscoWorks IPM CORBA GIOP请求远程溢出漏洞 | |
| CVE-2010-0137 | Cisco IOS XR SSH协议实现远程拒绝服务漏洞 | |
| CVE-2010-0379 | Adobe Flash Player Macromedia Flash ActiveX控件 多个未明漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2009-4003
No comments yet