Flash Player@9.0.45.0 Security Vulnerabilities and Issues — Flash Player@9.0.45.0 CVE List

Lucene search

AdobeFlash Player9.0.45.0

9 matches found

CVE•added 2008/11/10 2:12 p.m.•101 views

CVE-2008-4818

Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP response headers.

4.3CVSS5.4AI score0.06181EPSS

CVE•added 2008/11/10 2:12 p.m.•98 views

CVE-2008-4821

Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors.

4.3CVSS5.6AI score0.03894EPSS

CVE•added 2008/11/10 2:12 p.m.•97 views

CVE-2008-4823

Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute.

4.3CVSS5.4AI score0.06181EPSS

CVE•added 2008/11/10 2:12 p.m.•95 views

CVE-2008-4822

Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root domain policy.

6.8CVSS6.3AI score0.07757EPSS

CVE•added 2008/11/10 2:12 p.m.•91 views

CVE-2008-4819

Unspecified vulnerability in Adobe Flash Player 9.0.124.0 and earlier makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.

6.8CVSS6.3AI score0.11166EPSS

CVE•added 2008/11/10 2:12 p.m.•76 views

CVE-2008-4820

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.

7.1CVSS5.7AI score0.03951EPSS

CVE•added 2008/10/14 3:28 p.m.•68 views

CVE-2008-4546

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two ...

4.3CVSS9.2AI score0.22022EPSS

CVE•added 2008/01/04 12:46 a.m.•64 views

CVE-2007-6637

Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect. NOTE: the asfunction: vector is already covered by...

4.3CVSS5.5AI score0.58426EPSS

CVE•added 2008/04/09 9:5 p.m.•59 views

CVE-2007-6019

Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly.

9.3CVSS7.4AI score0.66216EPSS