Published: 17/10/2008 Updated: 30/10/2018

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

ActionScript in Adobe Flash Player 9.0.124.0 and previous versions does not require user interaction in conjunction with (1) the FileReference.browse operation in the FileReference upload API or (2) the FileReference.download operation in the FileReference download API, which allows remote malicious users to create a browse dialog box, and possibly have unspecified other impact, via an SWF file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe flash player 7.0.1
adobe flash player 7.0.70.0
adobe flash player 7.0_r67
adobe flash player 8.0.35.0
adobe flash player 8.0.39.0
adobe flash player 7.0
adobe flash player 7.1
adobe flash player 7.1.1
adobe flash player 9.0
adobe flash player 9.0.112.0
adobe flash player 7.0.25
adobe flash player 7.2
adobe flash player 8.0
adobe flash player 9.0.114.0
adobe flash player 9.0.115.0
adobe flash player 7.0.63
adobe flash player 7.0.69.0
adobe flash player 8.0.24.0
adobe flash player 8.0.34.0
adobe flash player

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes several security issues isnow available for Red Hat Enterprise Linux 3 and 4 ExtrasThis update has been rated as having critical security impact by the RedHat Sec ...

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes several security issues isnow available for Red Hat Enterprise Linux 5 SupplementaryThis update has been rated as having critical security impact by the RedHat Se ...

CWE-264 http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html http://securitytracker.com/id?1021061 http://www.adobe.com/support/security/bulletins/apsb08-18.html http://secunia.com/advisories/32270 http://secunia.com/advisories/32448 http://www.redhat.com/support/errata/RHSA-2008-0945.html http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html http://secunia.com/advisories/32759 http://secunia.com/advisories/32702 http://www.redhat.com/support/errata/RHSA-2008-0980.html http://secunia.com/advisories/33390 http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 http://security.gentoo.org/glsa/glsa-200903-23.xml http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm http://secunia.com/advisories/34226 http://www.vupen.com/english/advisories/2008/2838 https://exchange.xforce.ibmcloud.com/vulnerabilities/45913 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2008:0980

CVE-2008-4401

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect