CVE ID:	CVE-2009-0520
Description:	Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0520 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html BugTraq ID: 33880 http://www.securityfocus.com/bid/33880 Cert/CC Advisory: TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html http://security.gentoo.org/glsa/glsa-200903-23.xml http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=773 http://isc.sans.org/diary.html?storyid=5929 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16057 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6593 RedHat Security Advisories: RHSA-2009:0332 http://rhn.redhat.com/errata/RHSA-2009-0332.html RedHat Security Advisories: RHSA-2009:0334 http://rhn.redhat.com/errata/RHSA-2009-0334.html http://securitytracker.com/id?1021750 http://secunia.com/advisories/34012 http://secunia.com/advisories/34226 http://secunia.com/advisories/34293 http://secunia.com/advisories/35074 http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1 http://www.vupen.com/english/advisories/2009/0513 http://www.vupen.com/english/advisories/2009/0743 http://www.vupen.com/english/advisories/2009/1297 XForce ISS Database: flash-invalid-object-bo(48887) https://exchange.xforce.ibmcloud.com/vulnerabilities/48887