Published: 10/11/2008 Updated: 30/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and previous versions allows remote malicious users to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe flash player 7.0.69.0
adobe flash player 9.0.28.0
adobe flash player 8.0.39.0
adobe flash player 9.0
adobe flash player 9.0.115.0
adobe flash player 9.0.16
adobe flash player 9.0.18d60
adobe flash player 9.0.114.0
adobe flash player 9.0.20
adobe flash player 9.0.112.0
adobe flash player 9.0.20.0
adobe flash player 9.0.47.0
adobe flash player 9.0.45.0
adobe flash player
adobe flash player 9.0.31.0
adobe flash player 9.0.31
adobe flash player 9.0.48.0
adobe flash player 9.0.28

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes several security issues isnow available for Red Hat Enterprise Linux 3 and 4 ExtrasThis update has been rated as having critical security impact by the RedHat Sec ...

Synopsis Critical: flash-plugin security update Type/Severity Security Advisory: Critical Topic An updated Adobe Flash Player package that fixes several security issues isnow available for Red Hat Enterprise Linux 5 SupplementaryThis update has been rated as having critical security impact by the RedHat Se ...

CWE-79 http://www.adobe.com/support/security/bulletins/apsb08-20.html http://www.securityfocus.com/bid/32129 http://www.securitytracker.com/id?1021151 http://support.apple.com/kb/HT3338 http://www.us-cert.gov/cas/techalerts/TA08-350A.html http://secunia.com/advisories/33179 http://www.redhat.com/support/errata/RHSA-2008-0980.html http://secunia.com/advisories/32702 http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html http://secunia.com/advisories/33390 http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 http://security.gentoo.org/glsa/glsa-200903-23.xml http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm http://secunia.com/advisories/34226 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=http://www.vupen.com/english/advisories/2008/3444 https://access.redhat.com/errata/RHSA-2008:0980 https://nvd.nist.gov

CVE-2008-4823

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect