The ActionScript 2 virtual machine in Adobe Flash Player 10.x prior to 10.0.12.36 and 9.x prior to 9.0.151.0, and Adobe AIR prior to 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF file.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
adobe air |
||
adobe flash player |