PT-2008-5208 · Adobe · Flash Player

Published 2008-08-29 · Updated 2017-08-08 · CVE-2008-3873

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions 9.0.124.0 and earlier

Description The issue allows remote attackers to populate the clipboard with a URL without requiring user interaction, making it difficult to delete. This has been exploited in the wild.

Recommendations For Adobe Flash Player versions 9.0.124.0 and earlier, update to a version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2008-3873

RHSA-2008:0945

RHSA-2008:0980

Affected Products

Flash Player

References · 23

• http://redhat.com/support/errata/RHSA-2008-0945.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-3873 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0980.html · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200903-23.xml · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44584 · Note
• http://secunia.com/advisories/32759 · Note
• http://securityfocus.com/bid/31117 · Note
• http://vupen.com/english/advisories/2008/2838 · Note
• http://adobe.com/support/security/bulletins/apsb08-18.html · Note
• http://blogs.zdnet.com/security/?p=1759 · Note
• http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= · Note
• http://adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html · Note
• http://secunia.com/advisories/32448 · Note