Published: 10/11/2008 Updated: 30/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Adobe Flash Player 9.0.124.0 and previous versions, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows malicious users to obtain sensitive information via unknown vectors.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe flash_player
adobe flash_player 9.0.28.0
adobe flash_player 9.0.31
adobe flash_player 9.0.16
adobe flash_player 9.0.28
adobe flash_player 9.0.114.0
adobe flash_player 9.0.20.0
adobe flash_player 9.0.31.0
adobe flash_player 9.0.47.0
adobe flash_player 9.0.45.0
adobe flash_player 9.0.48.0
adobe flash_player 9.0.112.0
adobe flash_player 8.0.39.0
adobe flash_player 9.0
adobe flash_player 9.0.115.0
adobe flash_player 7.0.69.0
adobe flash_player 9.0.18d60
adobe flash_player 9.0.20

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes several security issues isnow available for Red Hat Enterprise Linux 3 and 4 ExtrasThis update has been rated as having critical security impact by the RedHat Sec ...

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes several security issues isnow available for Red Hat Enterprise Linux 5 SupplementaryThis update has been rated as having critical security impact by the RedHat Se ...

CWE-200 http://www.adobe.com/support/security/bulletins/apsb08-20.html http://www.securityfocus.com/bid/32129 http://www.securitytracker.com/id?1021149 http://www.redhat.com/support/errata/RHSA-2008-0980.html http://support.apple.com/kb/HT3338 http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html http://secunia.com/advisories/32702 http://secunia.com/advisories/33179 http://www.us-cert.gov/cas/techalerts/TA08-350A.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 http://secunia.com/advisories/33390 http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm http://security.gentoo.org/glsa/glsa-200903-23.xml http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm http://secunia.com/advisories/34226 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=http://www.vupen.com/english/advisories/2008/3444 https://exchange.xforce.ibmcloud.com/vulnerabilities/46534 https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2008:0980

CVE-2008-4821

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect