Lucene search

[email protected]CVE-2009-0522

HistoryFeb 26, 2009 - 4:17 p.m.

CVE-2009-0522

2009-02-2616:17:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

adobe flash player

cve-2009-0522

clickjacking attack

remote attacks

windows

6.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

80.5%

JSON

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user into visiting an arbitrary URL via an unspecified manipulation of the “mouse pointer display,” related to a “Clickjacking attack.”

CPENameOperatorVersion
adobe:airadobe aireq1.5
adobe:flash_playeradobe flash playerle10.0.12.36
adobe:flash_playeradobe flash playereq7.0
adobe:flash_playeradobe flash playereq7.0.1
adobe:flash_playeradobe flash playereq7.0.25
adobe:flash_playeradobe flash playereq7.0.63
adobe:flash_playeradobe flash playereq7.0.69.0
adobe:flash_playeradobe flash playereq7.0.70.0
adobe:flash_playeradobe flash playereq7.1
adobe:flash_playeradobe flash playereq7.1.1

CPE	Name	Operator	Version
adobe:air	adobe air	eq	1.5
adobe:flash_player	adobe flash player	le	10.0.12.36
adobe:flash_player	adobe flash player	eq	7.0
adobe:flash_player	adobe flash player	eq	7.0.1
adobe:flash_player	adobe flash player	eq	7.0.25
adobe:flash_player	adobe flash player	eq	7.0.63
adobe:flash_player	adobe flash player	eq	7.0.69.0
adobe:flash_player	adobe flash player	eq	7.0.70.0
adobe:flash_player	adobe flash player	eq	7.1
adobe:flash_player	adobe flash player	eq	7.1.1

Rows per page:

1-10 of 351

References

isc.sans.org/diary.html?storyid=5929

secunia.com/advisories/34012

securitytracker.com/id?1021752

www.adobe.com/support/security/bulletins/apsb09-01.html

www.vupen.com/english/advisories/2009/0513

exchange.xforce.ibmcloud.com/vulnerabilities/48903

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6674

6.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

80.5%

JSON

Related for CVE-2009-0522

ubuntucve1 prion1 nessus4 openvas4