PT-2008-5208 · Adobe · Flash Player

Publicado 2008-08-29 · Atualizado 2017-08-08 · CVE-2008-3873

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 9.0.124.0 and earlier

Description The issue allows remote attackers to populate the clipboard with a URL without requiring user interaction, making it difficult to delete. This has been exploited in the wild.

Recommendations For Adobe Flash Player versions 9.0.124.0 and earlier, update to a version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2008-3873

RHSA-2008:0945

RHSA-2008:0980

Produtos afetados

Flash Player

Referências · 23

• https://exchange.xforce.ibmcloud.com/vulnerabilities/44584 · Nota
• http://redhat.com/support/errata/RHSA-2008-0945.html · Aviso do Fabricante
• http://secunia.com/advisories/32759 · Nota
• http://securityfocus.com/bid/31117 · Nota
• http://vupen.com/english/advisories/2008/2838 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3873 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html · Aviso do Fabricante
• http://adobe.com/support/security/bulletins/apsb08-18.html · Nota
• http://blogs.zdnet.com/security/?p=1759 · Nota
• http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 · Aviso do Fabricante
• http://adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html · Nota
• http://secunia.com/advisories/32448 · Nota
• http://redhat.com/support/errata/RHSA-2008-0980.html · Aviso do Fabricante
• http://securitytracker.com/id?1020724 · Nota