PT-2009-4335 · Adobe · Flash Player+1

Gareth Heyes

·

Publicado

2009-07-31

·

Atualizado

2017-09-29

·

CVE-2009-1870

CVSS v2.0

4.9

Média

VetorAV:L/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions: Adobe Flash Player versions prior to 9.0.246.0 Adobe Flash Player versions 10.x prior to 10.0.32.18 Adobe AIR versions prior to 1.5.2
Description: The issue allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a local sandbox vulnerability.
Recommendations: For Adobe Flash Player versions prior to 9.0.246.0, update to version 9.0.246.0 or later. For Adobe Flash Player versions 10.x prior to 10.0.32.18, update to version 10.0.32.18 or later. For Adobe AIR versions prior to 1.5.2, update to version 1.5.2 or later.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2009-1870
RHSA-2009:1188
RHSA-2009:1189

Produtos afetados

Air
Flash Player