CVE-2008-4473: Adobe Flash Player

High severity, CVSS 9.3. EPSS: 7.9% chance of exploitation in the next 30 days.

Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.

Affected products

• Adobe Flash Player: version cs3 only; version mx_2004 only

Published 2008-10-17. Last modified 2026-06-16.