Flash Player@9.0.112.0 Security Vulnerabilities and Issues — Flash Player@9.0.112.0 CVE List

Lucene search

AdobeFlash Player9.0.112.0

92 matches found

CVE•added 2012/03/05 9:55 p.m.•136 views

CVE-2012-0768

The Matrix3D component in Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corrup...

10CVSS7.6AI score0.1046EPSS

CVE•added 2012/03/05 9:55 p.m.•135 views

CVE-2012-0769

Adobe Flash Player before 10.3.183.16 and 11.x before 11.1.102.63 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.7 on Android 2.x and 3.x; and before 11.1.115.7 on Android 4.x does not properly handle integers, which allows attackers to obtain sensitive information via unspecified vector...

5CVSS5.8AI score0.01948EPSS

CVE•added 2011/08/10 10:55 p.m.•128 views

CVE-2011-2140

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspec...

10CVSS9AI score0.89835EPSS

CVE•added 2012/03/28 7:55 p.m.•125 views

CVE-2012-0772

An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 11.x before 11.2.202.228, and AIR before 3.2.0.2070, on Windows does not properly perform URL security domain checking, which allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via un...

10CVSS7.7AI score0.24398EPSS

CVE•added 2012/08/31 7:55 p.m.•114 views

CVE-2012-4171

Adobe Flash Player before 10.3.183.23 and 11.x before 11.4.402.265 on Windows and Mac OS X, before 10.3.183.23 and 11.x before 11.2.202.238 on Linux, before 11.1.111.16 on Android 2.x and 3.x, and before 11.1.115.17 on Android 4.x; Adobe AIR before 3.4.0.2540; and Adobe AIR SDK before 3.4.0.2540 al...

5CVSS6.3AI score0.01747EPSS

CVE•added 2010/10/29 7:0 p.m.•109 views

CVE-2010-3654

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris and 10.1.95.1 on Android, and authplay.dll (aka AuthPlayLib.bundle or libauthplay.so.0.0.0) in Adobe Reader and Acrobat 9.x through 9.4, allows remote attackers to execute arbitrary code or caus...

9.3CVSS9.7AI score0.93527EPSS

CVE•added 2008/11/10 2:12 p.m.•101 views

CVE-2008-4818

Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP response headers.

4.3CVSS5.4AI score0.06181EPSS

CVE•added 2008/11/10 2:12 p.m.•98 views

CVE-2008-4821

Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors.

4.3CVSS5.6AI score0.03894EPSS

CVE•added 2008/11/10 2:12 p.m.•97 views

CVE-2008-4823

Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute.

4.3CVSS5.4AI score0.06181EPSS

CVE•added 2008/11/10 2:12 p.m.•95 views

CVE-2008-4822

Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root domain policy.

6.8CVSS6.3AI score0.07757EPSS

CVE•added 2008/10/17 7:31 p.m.•94 views

CVE-2008-4401

ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the FileReference.browse operation in the FileReference upload API or (2) the FileReference.download operation in the FileReference download API, which allows remote attackers to creat...

10CVSS6.8AI score0.04524EPSS

CVE•added 2010/08/11 6:47 p.m.•94 views

CVE-2010-0209

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2213, CVE-2010-2214, and CVE-2010-2216.

9.3CVSS9.7AI score0.02297EPSS

CVE•added 2011/08/15 9:55 p.m.•93 views

CVE-2011-2424

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via...

9.3CVSS8.8AI score0.13758EPSS

CVE•added 2008/11/10 2:12 p.m.•91 views

CVE-2008-4819

Unspecified vulnerability in Adobe Flash Player 9.0.124.0 and earlier makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.

6.8CVSS6.3AI score0.11166EPSS

CVE•added 2011/06/16 11:55 p.m.•91 views

CVE-2011-2110

Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June 2011.

10CVSS8.9AI score0.9143EPSS

CVE•added 2009/02/26 4:17 p.m.•82 views

CVE-2009-0520

Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."

9.3CVSS7.8AI score0.16079EPSS

CVE•added 2011/08/10 9:55 p.m.•81 views

CVE-2011-2130

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vul...

10CVSS9AI score0.13356EPSS

CVE•added 2010/10/19 9:0 p.m.•80 views

CVE-2010-3976

Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file...

9.3CVSS9.2AI score0.10042EPSS

CVE•added 2010/08/11 6:47 p.m.•79 views

CVE-2010-2215

Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "click-jacking" issue.

4.3CVSS9.2AI score0.01802EPSS

CVE•added 2008/11/10 2:12 p.m.•76 views

CVE-2008-4820

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.

7.1CVSS5.7AI score0.03951EPSS

CVE•added 2010/02/15 6:30 p.m.•76 views

CVE-2010-0186

Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors.

6.8CVSS7.4AI score0.02923EPSS

CVE•added 2010/09/15 6:0 p.m.•76 views

CVE-2010-2884

Adobe Flash Player 10.1.82.76 and earlier on Windows, Mac OS X, Linux, and Solaris and 10.1.92.10 on Android; authplay.dll in Adobe Reader and Acrobat 9.x before 9.4; and authplay.dll in Adobe Reader and Acrobat 8.x before 8.2.5 on Windows and Mac OS X allow remote attackers to execute arbitrary co...

9.3CVSS9.7AI score0.39683EPSS

CVE•added 2009/02/26 4:17 p.m.•75 views

CVE-2009-0114

Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL via unknown vectors, related to "a potential Clickjacking issue variant."

5.8CVSS7.4AI score0.17301EPSS

CVE•added 2009/02/26 4:17 p.m.•75 views

CVE-2009-0519

Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a crafted Shockwave Flash (aka .swf) file.

9.3CVSS7.9AI score0.17783EPSS

CVE•added 2010/08/11 6:47 p.m.•75 views

CVE-2010-2214

9.3CVSS9.7AI score0.02297EPSS

CVE•added 2010/08/11 6:47 p.m.•74 views

CVE-2010-2213

9.3CVSS9.7AI score0.02297EPSS

CVE•added 2011/08/10 10:55 p.m.•74 views

CVE-2011-2425

10CVSS9AI score0.89835EPSS

CVE•added 2011/08/10 10:55 p.m.•73 views

CVE-2011-2135

10CVSS9AI score0.89835EPSS

CVE•added 2010/08/11 6:47 p.m.•72 views

CVE-2010-2216

9.3CVSS9.7AI score0.02297EPSS

CVE•added 2011/08/10 10:55 p.m.•72 views

CVE-2011-2417

10CVSS9AI score0.89835EPSS

CVE•added 2009/07/31 7:30 p.m.•70 views

CVE-2009-1864

Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.

9.3CVSS8.1AI score0.03207EPSS

CVE•added 2009/07/31 7:30 p.m.•70 views

CVE-2009-1867

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "clickjacking vulnerability."

4.3CVSS7.3AI score0.00989EPSS

CVE•added 2009/07/31 7:30 p.m.•70 views

CVE-2009-1868

9.3CVSS8.1AI score0.18527EPSS

CVE•added 2011/08/10 9:55 p.m.•70 views

CVE-2011-2134

10CVSS9AI score0.13356EPSS

CVE•added 2010/02/15 6:30 p.m.•69 views

CVE-2010-0187

Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file.

4.3CVSS7.2AI score0.41655EPSS

CVE•added 2011/05/13 10:55 p.m.•69 views

CVE-2011-0619

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-0620, CVE-2011-0621, and CVE-...

9.3CVSS8.8AI score0.05847EPSS

CVE•added 2011/06/09 2:38 a.m.•69 views

CVE-2011-2107

Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.181.22 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.22 and earlier on Android, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a "universal cross-site scripting vu...

4.3CVSS7AI score0.01077EPSS

CVE•added 2008/10/14 3:28 p.m.•68 views

CVE-2008-4546

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two ...

4.3CVSS9.2AI score0.22022EPSS

CVE•added 2011/05/13 10:55 p.m.•68 views

CVE-2011-0621

9.3CVSS8.8AI score0.05847EPSS

CVE•added 2011/08/10 10:55 p.m.•68 views

CVE-2011-2414

10CVSS9AI score0.13356EPSS

CVE•added 2011/08/10 10:55 p.m.•68 views

CVE-2011-2416

Integer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vu...

10CVSS9AI score0.04528EPSS

CVE•added 2013/04/10 3:48 a.m.•68 views

CVE-2013-1378

Adobe Flash Player before 10.3.183.75 and 11.x before 11.7.700.169 on Windows and Mac OS X, before 10.3.183.75 and 11.x before 11.2.202.280 on Linux, before 11.1.111.50 on Android 2.x and 3.x, and before 11.1.115.54 on Android 4.x; Adobe AIR before 3.7.0.1530; and Adobe AIR SDK & Compiler before 3....

10CVSS7.7AI score0.09513EPSS

CVE•added 2011/05/13 10:55 p.m.•67 views

CVE-2011-0623

Adobe Flash Player before 10.3.181.14 on Windows, Mac OS X, Linux, and Solaris and before 10.3.185.21 on Android allows attackers to execute arbitrary code via unspecified vectors, related to a "bounds checking" issue, a different vulnerability than CVE-2011-0624, CVE-2011-0625, and CVE-2011-0626.

9.3CVSS8.7AI score0.04606EPSS

CVE•added 2011/09/22 3:38 a.m.•67 views

CVE-2011-2426

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via unspecified vectors.

9.3CVSS9AI score0.11685EPSS

CVE•added 2011/09/22 3:38 a.m.•67 views

CVE-2011-2427

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

9.3CVSS9AI score0.02417EPSS

CVE•added 2009/07/31 7:30 p.m.•66 views

CVE-2009-1865

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a "null pointer vulnerability."

9.3CVSS8AI score0.02504EPSS

CVE•added 2011/08/10 10:55 p.m.•66 views

CVE-2011-2138

10CVSS9AI score0.04528EPSS

CVE•added 2011/09/22 3:38 a.m.•66 views

CVE-2011-2430

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via crafted streaming media, related to a "logic error vulnerability."

9.3CVSS8.8AI score0.0662EPSS

CVE•added 2011/08/10 10:55 p.m.•65 views

CVE-2011-2136

10CVSS9AI score0.04528EPSS

CVE•added 2011/08/10 10:55 p.m.•65 views

CVE-2011-2139

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via unspecif...

6.4CVSS8.3AI score0.02879EPSS

Total number of security vulnerabilities92