CVE-2008-4818

2008-11-1000:00:00

ubuntu.com

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

80.3%

JSON

Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0
and earlier allows remote attackers to inject arbitrary web script or HTML
via vectors involving HTTP response headers.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchflashplugin-nonfree< 9.0.246.0ubuntu1UNKNOWN
ubuntu8.10noarchflashplugin-nonfree< 10.0.32.18ubuntu0.8.10.1UNKNOWN
ubuntu9.04noarchflashplugin-nonfree< 10.0.32.18ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchflashplugin-nonfree< 10.0.32.18ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	flashplugin-nonfree	< 9.0.246.0ubuntu1	UNKNOWN
ubuntu	8.10	noarch	flashplugin-nonfree	< 10.0.32.18ubuntu0.8.10.1	UNKNOWN
ubuntu	9.04	noarch	flashplugin-nonfree	< 10.0.32.18ubuntu0.9.04.1	UNKNOWN
ubuntu	9.10	noarch	flashplugin-nonfree	< 10.0.32.18ubuntu1	UNKNOWN