PT-2008-5207 · Adobe · Flash Player

Publicado 2008-10-06 · Atualizado 2019-07-23 · CVE-2008-3872

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 8.0.39.0 and earlier, and 9.x up to 9.0.115.0

Description The issue allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations.

Recommendations For Adobe Flash Player versions 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, update to a version later than 9.0.115.0 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-3872

RHSA-2008:0221

Produtos afetados

Flash Player

Referências · 5

• http://adobe.com/support/security/bulletins/apsb08-11.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3872 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3872 · Nota de Segurança
• http://taviso.decsystem.org/research.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45713 · Nota