FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2006-3311

This CVE name corresponds to:

Entered	Topic
2006-09-12	linux-flashplugin7 -- arbitrary code execution vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2006-3311 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2006-3311
Phase	Assigned(20060629)

Description

Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie.

References

Source	Reference
BUGTRAQ	20060912 Computer Terrorism (UK) :: Incident Response Centre - Adobe/Macromedia Flash Player Vulnerability
MISC	http://www.computerterrorism.com/research/ct12-09-2006.htm
CONFIRM	http://www.adobe.com/support/security/bulletins/apsb06-11.html
APPLE	APPLE-SA-2006-09-29
GENTOO	GLSA-200610-02
MS	MS06-069
REDHAT	RHSA-2006:0674
SUSE	SUSE-SA:2006:053
CERT	TA06-275A
CERT	TA06-318A
CERT-VN	VU#451380
BID	19980
VUPEN	ADV-2006-3577
VUPEN	ADV-2006-3573
VUPEN	ADV-2006-3852
VUPEN	ADV-2006-4507
OVAL	oval:org.mitre.oval:def:394
SECTRACK	1016829
SECUNIA	21865
SECUNIA	21901
SECUNIA	22054
SECUNIA	22187
SECUNIA	22882
SECUNIA	22268
SREASON	1546
XF	flashplayer-swf-string-bo(28886)