Title: Adobe Flash Player Unspecified Input Validation Arbitrary Code Execution

Unknown or Incomplete

• Security Tracker: 1019811 1020114
• CVE ID: 2007-0071 (see also: NVD)
• Secunia Advisory ID: 28083 29763 29865 30404 30430 30507
• Bugtraq ID: 29386
• SCIP VulDB ID: 3676
• CERT VU: 395473
• Related OSVDB ID: 44283
• VUPEN Advisory: ADV-2008-1662
• Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2008-05/0638.html
• Vendor Specific News/Changelog Entry: http://blogs.adobe.com/psirt/2008/05/more_information_on_recent_fla.html
• Vendor Specific Advisory URL: http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue.html
  http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue_u_1.html
  http://support.apple.com/kb/HT1897
  http://www.adobe.com/support/security/bulletins/apsb08-11.html
• Other Advisory URL: http://ddanchev.blogspot.com/2008/05/malware-attack-exploiting-flash-zero.html
  http://osvdb.org/blog/?p=246
  http://sunsolve.sun.com/search/document.do?assetkey=1-66-238305-1
  http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml
  http://www.novell.com/linux/security/advisories/2008_22_flashplayer.html
• Generic Exploit URL: http://immunitysec.com
• News Article: http://isc.sans.org/diary.html?storyid=4465
  http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9089778
  http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9090858
  http://www.eweek.com/c/a/Security/Symantec-Adobe-Patch-Not-a-Problem-After-All/
• RedHat RHSA: RHSA-2008:0221
• CERT: TA08-100A

Unknown or Incomplete