Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:air:1.01:*:*:*:*:*:*:*

part: a version: 1.01 update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductAir (aee661f6-098a-5e89-87e5-b0b3b577dc2d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1870 vulnerable 2026-06-08 04:51:25.481540 Details available
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a "local sandbox vulnerability."
Published: 2009-07-31T19:00:00.000Z
Updated: 2024-08-07T05:27:54.671Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1869 vulnerable 2026-06-08 04:51:25.480165 Details available
Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.
Published: 2009-07-31T19:00:00.000Z
Updated: 2024-08-07T05:27:54.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1868 vulnerable 2026-06-08 04:51:25.478829 Details available
Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing.
Published: 2009-07-31T19:00:00.000Z
Updated: 2024-08-07T05:27:54.513Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1867 vulnerable 2026-06-08 04:51:25.477473 Details available
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "clickjacking vulnerability."
Published: 2009-07-31T19:00:00.000Z
Updated: 2024-08-07T05:27:54.670Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1866 vulnerable 2026-06-08 04:51:25.476208 Details available
Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.
Published: 2009-07-31T19:00:00.000Z
Updated: 2024-08-07T05:27:54.652Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1865 vulnerable 2026-06-08 04:51:25.474827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1864 vulnerable 2026-06-08 04:51:25.473511 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1863 vulnerable 2026-06-08 04:51:25.454221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.