CVE-2008-1655

EPSS 27.26%
Veröffentlicht 09.04.2008 21:05:00
Zuletzt bearbeitet 23.04.2026 00:35:47
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 23

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Adobe ≫ Air Version1.0

Adobe ≫ Flash Player Version <= 9.0.115.0

Adobe ≫ Flex Version3.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	27.26%	0.962

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://lists.apple.com/archives/security-announce/2008//May/msg00001.html

http://secunia.com/advisories/30430

http://www.us-cert.gov/cas/techalerts/TA08-150A.html

US Government Resource

http://www.vupen.com/english/advisories/2008/1697

http://secunia.com/advisories/30507

http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1

http://www.vupen.com/english/advisories/2008/1724/references

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html

http://secunia.com/advisories/29763

http://secunia.com/advisories/29865

http://www.adobe.com/support/security/bulletins/apsb08-11.html