CVE:CVE-2007-6019
CNNVD:CNNVD-200804-113
Flash Player是一款非常流行的FLASH播放器 。
Flash player在试图访问没有正确实例化的嵌入Actionscript对象时存在堆溢出漏洞，如果攻击者恶意修改了SWF文件中的DeclareFunction2 Actionscript标签的话，则用户打开该文件就可能触发堆溢出，导致以当前登录用户的权限执行任意指令 。
solution:Upgrade adobe air to a higher version than 1.0,and avoid the version 1.0; Upgrade adobe flash to a higher version than basic:8,professional:8,professional:cs3,and avoid the version basic:8,professional:8,professional:cs3; Upgrade adobe flash_player to a higher version than 9.0.115.0,7.0,7.0.1,7.0.25,7.0.63,7.0.69.0,7.0.70.0,7.0_r67,7.1,7.1.1,7.2,8,8.0,8.0.24.0,8.0.34.0,8.0.35.0,8.0.39.0,9.0,9.0.16,9.0.18d60,9.0.20,9.0.20.0,9.0.28,9.0.28.0,9.0.31,9.0.31.0,9.0.45.0,9.0.47.0,9.0.48.0,9.0.112.0,9.0.114.0,9.0.124.0,9.0.155.0,and avoid the version (,9.0.115.0],7.0,7.0.1,7.0.25,7.0.63,7.0.69.0,7.0.70.0,7.0_r67,7.1,7.1.1,7.2,8,8.0,8.0.24.0,8.0.34.0,8.0.35.0,8.0.39.0,9.0,9.0.16,9.0.18d60,9.0.20,9.0.20.0,9.0.28,9.0.28.0,9.0.31,9.0.31.0,9.0.45.0,9.0.47.0,9.0.48.0,9.0.112.0,9.0.114.0,9.0.124.0,9.0.155.0; Upgrade adobe flex to a higher version than 3.0,and avoid the version 3.0