CVE-2008-1201: Adobe Flash

Medium severity, CVSS 6.8. EPSS: 19.7% chance of exploitation in the next 30 days.

Multiple unspecified vulnerabilities in FLA file parsing in Adobe Flash CS3 Professional, Flash Professional 8, and Flash Basic 8 on Windows allow user-assisted remote attackers to execute arbitrary code via a crafted .FLA file.

Affected products

• Adobe Flash: version basic only; version professional only

Published 2008-03-24. Last modified 2026-06-16.