CVE-2008-4821

2008-11-1014:12:00

CWE-200

[email protected]

web.nvd.nist.gov

adobe flash player

vulnerability

cve-2008-4821

nvd

security

mozilla

browser

sensitive information

5.6 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.4%

JSON

Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors.

CPENameOperatorVersion
adobe:flash_playeradobe flash playerle9.0.124.0
adobe:flash_playeradobe flash playereq7.0.69.0
adobe:flash_playeradobe flash playereq8.0.39.0
adobe:flash_playeradobe flash playereq9.0
adobe:flash_playeradobe flash playereq9.0.16
adobe:flash_playeradobe flash playereq9.0.18d60
adobe:flash_playeradobe flash playereq9.0.20
adobe:flash_playeradobe flash playereq9.0.20.0
adobe:flash_playeradobe flash playereq9.0.28
adobe:flash_playeradobe flash playereq9.0.28.0

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	le	9.0.124.0
adobe:flash_player	adobe flash player	eq	7.0.69.0
adobe:flash_player	adobe flash player	eq	8.0.39.0
adobe:flash_player	adobe flash player	eq	9.0
adobe:flash_player	adobe flash player	eq	9.0.16
adobe:flash_player	adobe flash player	eq	9.0.18d60
adobe:flash_player	adobe flash player	eq	9.0.20
adobe:flash_player	adobe flash player	eq	9.0.20.0
adobe:flash_player	adobe flash player	eq	9.0.28
adobe:flash_player	adobe flash player	eq	9.0.28.0