PT-2008-5207 · Adobe · Flash Player

Published 2008-10-06 · Updated 2019-07-23 · CVE-2008-3872

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 8.0.39.0 and earlier, and 9.x up to 9.0.115.0

Description The issue allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations.

Recommendations For Adobe Flash Player versions 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, update to a version later than 9.0.115.0 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-3872

RHSA-2008:0221

Affected Products

Flash Player

References · 5

• http://adobe.com/support/security/bulletins/apsb08-11.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3872 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3872 · Note
• http://taviso.decsystem.org/research.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45713 · Note