CVE-2008-4824

Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.adobe.com/support/security/bulletins/apsb08-22.html	Patch Vendor Advisory
http://www.isecpartners.com/advisories/2008-01-flash.txt	Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA08-350A.html	Third Party Advisory US Government Resource
http://www.redhat.com/support/errata/RHSA-2008-0980.html	Third Party Advisory
http://secunia.com/advisories/33179	Third Party Advisory
http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html	Mailing List Third Party Advisory
http://secunia.com/advisories/32702	Third Party Advisory
http://support.apple.com/kb/HT3338	Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1	Broken Link
http://secunia.com/advisories/33390	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200903-23.xml	Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm	Third Party Advisory
http://secunia.com/advisories/34226	Third Party Advisory
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=	Broken Link
http://www.vupen.com/english/advisories/2008/3444	Third Party Advisory
http://www.vupen.com/english/advisories/2008/3189	Third Party Advisory
http://osvdb.org/49958	Broken Link
http://secunia.com/advisories/32772	Third Party Advisory
http://www.securityfocus.com/archive/1/498561/100/0/threaded	Third Party Advisory VDB Entry

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:adobe:flash_player::::::::
	cpe:2.3:a:adobe:flash_player::::::::

Information

Published : 2008-11-17 14:21

Updated : 2018-11-02 06:43

NVD link : CVE-2008-4824

Mitre link : CVE-2008-4824

JSON object : View

CWE

CWE-20

Improper Input Validation

Advertisement

Products Affected

adobe

flash_player

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.adobe.com/support/security/bulletins/apsb08-22.html", "name": "http://www.adobe.com/support/security/bulletins/apsb08-22.html", "tags": ["Patch", "Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://www.isecpartners.com/advisories/2008-01-flash.txt", "name": "http://www.isecpartners.com/advisories/2008-01-flash.txt", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA08-350A.html", "name": "TA08-350A", "tags": ["Third Party Advisory", "US Government Resource"], "refsource": "CERT"}, {"url": "http://www.redhat.com/support/errata/RHSA-2008-0980.html", "name": "RHSA-2008:0980", "tags": ["Third Party Advisory"], "refsource": "REDHAT"}, {"url": "http://secunia.com/advisories/33179", "name": "33179", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html", "name": "APPLE-SA-2008-12-15", "tags": ["Mailing List", "Third Party Advisory"], "refsource": "APPLE"}, {"url": "http://secunia.com/advisories/32702", "name": "32702", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://support.apple.com/kb/HT3338", "name": "http://support.apple.com/kb/HT3338", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1", "name": "248586", "tags": ["Broken Link"], "refsource": "SUNALERT"}, {"url": "http://secunia.com/advisories/33390", "name": "33390", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://security.gentoo.org/glsa/glsa-200903-23.xml", "name": "GLSA-200903-23", "tags": ["Third Party Advisory"], "refsource": "GENTOO"}, {"url": "http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm", "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm", "tags": ["Third Party Advisory"], "refsource": "CONFIRM"}, {"url": "http://secunia.com/advisories/34226", "name": "34226", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=", "name": "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=", "tags": ["Broken Link"], "refsource": "CONFIRM"}, {"url": "http://www.vupen.com/english/advisories/2008/3444", "name": "ADV-2008-3444", "tags": ["Third Party Advisory"], "refsource": "VUPEN"}, {"url": "http://www.vupen.com/english/advisories/2008/3189", "name": "ADV-2008-3189", "tags": ["Third Party Advisory"], "refsource": "VUPEN"}, {"url": "http://osvdb.org/49958", "name": "49958", "tags": ["Broken Link"], "refsource": "OSVDB"}, {"url": "http://secunia.com/advisories/32772", "name": "32772", "tags": ["Third Party Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/archive/1/498561/100/0/threaded", "name": "20081122 Adobe Flash Multiple Vulnerabilities", "tags": ["Third Party Advisory", "VDB Entry"], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to \"input validation errors.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-20"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2008-4824", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2008-11-17T22:21Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.12.36", "versionStartIncluding": "10"}, {"cpe23Uri": "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "9.0.151.0", "versionStartIncluding": "9.0.16.0"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-11-02T13:43Z"}