Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-4503
HistoryOct 09, 2008 - 6:00 p.m.

CVE-2008-4503

2008-10-0918:00:01
[email protected]
web.nvd.nist.gov
7

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.031

Percentile

91.1%

JSON

The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to “clickjacking.”

Affected configurations

Nvd
Node
adobeflash_playerRange≤9.0.124.0
OR
adobeflash_playerMatch7.0
OR
adobeflash_playerMatch7.0.1
OR
adobeflash_playerMatch7.0.25
OR
adobeflash_playerMatch7.0.63
OR
adobeflash_playerMatch7.0.63linux
OR
adobeflash_playerMatch7.0.69.0
OR
adobeflash_playerMatch7.0.70.0
OR
adobeflash_playerMatch7.0_r67
OR
adobeflash_playerMatch7.0_r67solaris
OR
adobeflash_playerMatch7.1
OR
adobeflash_playerMatch7.1.1
OR
adobeflash_playerMatch7.2
OR
adobeflash_playerMatch8pro
OR
adobeflash_playerMatch8professional
OR
adobeflash_playerMatch8.0
OR
adobeflash_playerMatch8.0.24.0
OR
adobeflash_playerMatch8.0.34.0
OR
adobeflash_playerMatch8.0.35.0
OR
adobeflash_playerMatch8.0.39.0
OR
adobeflash_playerMatch9.0
OR
adobeflash_playerMatch9.0.114.0
OR
adobeflash_playerMatch9.0.115.0
VendorProductVersionCPE
adobeflash_player*cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
adobeflash_player7.0cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*
adobeflash_player7.0.1cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*
adobeflash_player7.0.25cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*
adobeflash_player7.0.63cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*
adobeflash_player7.0.63cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:*
adobeflash_player7.0.69.0cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*
adobeflash_player7.0.70.0cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*
adobeflash_player7.0_r67cpe:2.3:a:adobe:flash_player:7.0_r67:*:*:*:*:*:*:*
adobeflash_player7.0_r67cpe:2.3:a:adobe:flash_player:7.0_r67:*:solaris:*:*:*:*:*
Rows per page:
1-10 of 231

References

Related

cve 1
ubuntucve 1
cvelist 1
prion 1
openvas 8
nessus 9
freebsd 1
redhat 2
gentoo 1
cve
cve
CVE-2008-4503
2008-10-09 18:00:01
ubuntucve
ubuntucve
CVE-2008-4503
2008-10-09 00:00:00
cvelist
cvelist
CVE-2008-4503
2008-10-09 16:00:00
prion
prion
Design/Logic Flaw
2008-10-09 18:00:00
openvas
openvas
Adobe Flash Player Multiple Security Bypass Vulnerabilities (Linux)
2008-10-16 00:00:00
Adobe Flash Player Multiple Security Bypass Vulnerabilities - Windows
2008-10-16 00:00:00
FreeBSD Ports: linux-flashplugin
2008-11-01 00:00:00
nessus
nessus
FreeBSD : linux-flashplugin -- multiple vulnerabilities (78f456fd-9c87-11dd-a55e-00163e000016)
2008-10-20 00:00:00
openSUSE 10 Security Update : flash-player (flash-player-5747)
2008-11-12 00:00:00
openSUSE Security Update : flash-player (flash-player-294)
2009-07-21 00:00:00
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2008-10-15 00:00:00
redhat
redhat
(RHSA-2008:0945) Critical: flash-plugin security update
2008-10-28 00:00:00
(RHSA-2008:0980) Critical: flash-plugin security update
2008-11-12 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2009-03-10 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

Low

EPSS

0.031

Percentile

91.1%

JSON
Related for NVD:CVE-2008-4503
cve1ubuntucve1cvelist1prion1openvas8nessus9freebsd1redhat2gentoo1