CVE-2008-4822

2008-11-1014:12:00

CWE-264

[email protected]

web.nvd.nist.gov

adobe

flash player

interpretation issue

security vulnerability

cve-2008-4822

nvd

6.4 Medium

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.029 Low

EPSS

Percentile

90.7%

JSON

Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root domain policy.

CPENameOperatorVersion
adobe:flash_playeradobe flash playereq9.0.16
adobe:flash_playeradobe flash playereq9.0.48.0
adobe:flash_playeradobe flash playerle9.0.124.0
adobe:flash_playeradobe flash playereq9.0.18d60
adobe:flash_playeradobe flash playereq9.0.47.0
adobe:flash_playeradobe flash playereq9.0.28.0
adobe:flash_playeradobe flash playereq9.0.114.0
adobe:flash_playeradobe flash playereq9.0.20.0
adobe:flash_playeradobe flash playereq9.0.31.0
adobe:flash_playeradobe flash playereq9.0.112.0

CPE	Name	Operator	Version
adobe:flash_player	adobe flash player	eq	9.0.16
adobe:flash_player	adobe flash player	eq	9.0.48.0
adobe:flash_player	adobe flash player	le	9.0.124.0
adobe:flash_player	adobe flash player	eq	9.0.18d60
adobe:flash_player	adobe flash player	eq	9.0.47.0
adobe:flash_player	adobe flash player	eq	9.0.28.0
adobe:flash_player	adobe flash player	eq	9.0.114.0
adobe:flash_player	adobe flash player	eq	9.0.20.0
adobe:flash_player	adobe flash player	eq	9.0.31.0
adobe:flash_player	adobe flash player	eq	9.0.112.0