Intrusion Prevention

Adobe.Flash.AVM2.intrf_count.Integer.Overflow

Description

This indicates an attack attempt against a integer overflow vulnerability in Adobe Flash Player.
The vulnerability is caused by an error when the vulnerable software handles a specially crafted SWF file. It allows a remote attacker to execute arbitrary code.

Affected Products

Adobe Flash Player version 9.0.159.0 and previous versions
Adobe Flash Player version 10.0.22.87 and previous versions
Adobe AIR version 1.5.1 and previous versions

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.
Denial of Service: Remote attackers can crash vulnerable systems.

Recommended Actions

Upgrade to the Adobe Flash Player latest versions:
http://www.adobe.com/go/getflashplayer
Upgrade to the Adobe AIR latest versions:
http://get.adobe.com/air

CVE References

CVE-2009-1869