Published: 09/10/2008 Updated: 30/10/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

The Settings Manager in Adobe Flash Player 9.0.124.0 and previous versions allows remote malicious users to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking."

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe flash player 7.0.25
adobe flash player 7.0.63
adobe flash player 7.1
adobe flash player 8.0.24.0
adobe flash player 8.0.39.0
adobe flash player 8
adobe flash player 7.0.1
adobe flash player 8.0.34.0
adobe flash player 8.0
adobe flash player
adobe flash player 9.0.115.0
adobe flash player 7.0
adobe flash player 7.0_r67
adobe flash player 7.0.70.0
adobe flash player 9.0
adobe flash player 7.0.69.0
adobe flash player 7.1.1
adobe flash player 7.2
adobe flash player 8.0.35.0
adobe flash player 9.0.114.0

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes several security issues isnow available for Red Hat Enterprise Linux 3 and 4 ExtrasThis update has been rated as having critical security impact by the RedHat Sec ...

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes several security issues isnow available for Red Hat Enterprise Linux 5 SupplementaryThis update has been rated as having critical security impact by the RedHat Se ...

NVD-CWE-Other http://www.securitytracker.com/id?1020996 http://www.adobe.com/support/security/advisories/apsa08-08.html http://ha.ckers.org/blog/20081007/clickjacking-details/http://secunia.com/advisories/32163 http://www.securityfocus.com/bid/31625 http://blog.guya.net/2008/10/07/malicious-camera-spying-using-clickjacking/http://www.adobe.com/support/security/bulletins/apsb08-18.html http://secunia.com/advisories/32448 http://www.redhat.com/support/errata/RHSA-2008-0945.html http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html http://secunia.com/advisories/32759 http://secunia.com/advisories/32702 http://www.redhat.com/support/errata/RHSA-2008-0980.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 http://secunia.com/advisories/33390 http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm http://security.gentoo.org/glsa/glsa-200903-23.xml http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm http://secunia.com/advisories/34226 http://www.vupen.com/english/advisories/2008/2764 https://exchange.xforce.ibmcloud.com/vulnerabilities/45721 https://access.redhat.com/errata/RHSA-2008:0980 https://nvd.nist.gov

CVE-2008-4503

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect