Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, accepts an untrusted input value for a "constant count," which allows remote attackers to read sensitive data from process memory via a crafted PDF file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Adobe Flash Player ActionScript 畸形PDF敏感信息泄露漏洞
Vulnerability Description
Flash Player是一款非常流行的FLASH播放器。 Adobe Flash Player 10.x 前的 10.0.12.36 版和 9.x 前的 9.0.151.0版和Adobe AIR 1.5以前的版本中的ActionScript 2虚拟机，从"constant count,"中接收了一个未受信任的输入值，这允许远程攻击者通过一个特制的PDF文件来从进程内存中读取敏感数据。
CVSS Information
N/A
Vulnerability Type
N/A