CVEs-PoC/2007/CVE-2007-3456.md

### [CVE-2007-3456](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3456)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value for a (1) Long string or (2) XML variable type in a crafted (a) FLV or (b) SWF file, related to an "input validation error," including a signed comparison of values that are assumed to be non-negative.

### POC

#### Reference
- http://www.mindedsecurity.com/labs/advisories/MSA01110707

#### Github
No PoCs found on GitHub currently.