CVE-2007-0071

CVE-2007-0071 is a critical-severity vulnerability in Adobe Flash Player with a CVSS 2.0 base score of 9.3. Its EPSS exploit-prediction score of 93% places it in the 100th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-189.

Key facts

• Severity: Critical (CVSS 2.0 base score 9.3)
• EPSS exploit prediction: 93% (100th percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-189
• Affected product: Adobe Flash Player
• Published: 2008-04-09
• Last modified: 2026-06-16

Description

Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow.

Frequently asked questions

What is CVE-2007-0071?

Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow.

How severe is CVE-2007-0071?

CVE-2007-0071 has a CVSS 2.0 base score of 9.3, rated critical severity.

Is CVE-2007-0071 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 93% (100th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-0071?

CVE-2007-0071 affects Adobe Flash Player. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2007-0071?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2007-0071 published?

CVE-2007-0071 was published on 2008-04-09 and last updated on 2026-06-16.

References

• http://blogs.adobe.com/psirt/2008/05/potential_flash_player_issue.html
• http://documents.iss.net/whitepapers/IBM_X-Force_WP_final.pdf
• http://isc.sans.org/diary.html?storyid=4465
• http://lists.apple.com/archives/security-announce/2008//May/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html
• http://secunia.com/advisories/29763
• http://secunia.com/advisories/29865
• http://secunia.com/advisories/30404
• http://secunia.com/advisories/30430
• http://secunia.com/advisories/30507
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1
• http://www.adobe.com/support/security/bulletins/apsb08-11.html
• http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml
• http://www.iss.net/threats/289.html
• http://www.kb.cert.org/vuls/id/159523
• http://www.kb.cert.org/vuls/id/395473
• http://www.matasano.com/log/1032/this-new-vulnerability-dowds-inhuman-flash-exploit/
• http://www.osvdb.org/44282
• http://www.redhat.com/support/errata/RHSA-2008-0221.html
• http://www.securityfocus.com/bid/28695
• http://www.securityfocus.com/bid/29386
• http://www.securitytracker.com/id?1019811
• http://www.securitytracker.com/id?1020114
• http://www.us-cert.gov/cas/techalerts/TA08-100A.html
• http://www.us-cert.gov/cas/techalerts/TA08-149A.html
• http://www.us-cert.gov/cas/techalerts/TA08-150A.html
• http://www.vupen.com/english/advisories/2008/1662/references
• http://www.vupen.com/english/advisories/2008/1697
• http://www.vupen.com/english/advisories/2008/1724/references
• http://www.zerodayinitiative.com/advisories/ZDI-08-032/

Affected products (1)

• cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

More vulnerabilities in Adobe Flash Player

• CVE-2015-8459 — Critical (CVSS 10.0): Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on…
• CVE-2015-8457 — Critical (CVSS 10.0): Stack-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and…
• CVE-2015-8455 — Critical (CVSS 10.0): Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on…
• CVE-2015-8454 — Critical (CVSS 10.0): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and…
• CVE-2015-8452 — Critical (CVSS 10.0): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and…
• CVE-2015-8451 — Critical (CVSS 10.0): Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on…

All CVEs affecting Adobe Flash Player →

Other CWE-189 (Numeric Errors) vulnerabilities

• CVE-2015-8396 — Critical (CVSS 10.0): Integer overflow in the ImageRegionReader::ReadIntoBuffer function in…
• CVE-2015-7205 — Critical (CVSS 10.0): Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x…
• CVE-2015-6575 — Critical (CVSS 10.0): SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which…
• CVE-2015-3864 — Critical (CVSS 10.0): Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in…
• CVE-2015-3836 — Critical (CVSS 10.0): The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1…
• CVE-2015-3834 — Critical (CVSS 10.0): Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android…

Browse all CWE-189 (Numeric Errors) vulnerabilities →