CVE-2009-1870

2009-07-3100:00:00

ubuntu.com

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:C/I:N/A:N

0.001 Low

EPSS

Percentile

28.3%

JSON

Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe
AIR before 1.5.2, allows attackers to obtain sensitive information via
vectors involving saving an SWF file to a hard drive, related to a “local
sandbox vulnerability.”

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchadobe-flashplugin< 10.0.32.18-1hardy1UNKNOWN
ubuntu8.10noarchadobe-flashplugin< 10.0.32.18-1intrepid1UNKNOWN
ubuntu9.04noarchadobe-flashplugin< 10.0.32.18-1jaunty1UNKNOWN
ubuntu9.10noarchadobe-flashplugin< 10.0.32.18-1karmic2UNKNOWN
ubuntu8.04noarchflashplugin-nonfree< 9.0.246.0ubuntu1UNKNOWN
ubuntu8.10noarchflashplugin-nonfree< 10.0.32.18ubuntu0.8.10.1UNKNOWN
ubuntu9.04noarchflashplugin-nonfree< 10.0.32.18ubuntu0.9.04.1UNKNOWN
ubuntu9.10noarchflashplugin-nonfree< 10.0.32.18ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	adobe-flashplugin	< 10.0.32.18-1hardy1	UNKNOWN
ubuntu	8.10	noarch	adobe-flashplugin	< 10.0.32.18-1intrepid1	UNKNOWN
ubuntu	9.04	noarch	adobe-flashplugin	< 10.0.32.18-1jaunty1	UNKNOWN
ubuntu	9.10	noarch	adobe-flashplugin	< 10.0.32.18-1karmic2	UNKNOWN
ubuntu	8.04	noarch	flashplugin-nonfree	< 9.0.246.0ubuntu1	UNKNOWN
ubuntu	8.10	noarch	flashplugin-nonfree	< 10.0.32.18ubuntu0.8.10.1	UNKNOWN
ubuntu	9.04	noarch	flashplugin-nonfree	< 10.0.32.18ubuntu0.9.04.1	UNKNOWN
ubuntu	9.10	noarch	flashplugin-nonfree	< 10.0.32.18ubuntu1	UNKNOWN