Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-5362
HistoryDec 08, 2008 - 12:00 a.m.

CVE-2008-5362

2008-12-0800:00:00
ubuntu.com
ubuntu.com
10

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.9%

The DefineConstantPool action in the ActionScript 2 virtual machine in
Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and
Adobe AIR before 1.5, accepts an untrusted input value for a “constant
count,” which allows remote attackers to read sensitive data from process
memory via a crafted PDF file.

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

76.9%

Related for UB:CVE-2008-5362