7.1

CVE-2009-3951

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4820.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Adobe Air Version <= 1.5.2
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version1.0
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version1.0.1
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version1.1
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version1.5.1
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version <= 10.0.32.18
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0.1
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0.25
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0.63
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0.69.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0.70.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.1
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.1.1
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.2
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8 Editionpro
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8 Editionprofessional
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0 Editionbasic
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0 Editionpro
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0.24.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0.34.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0.35.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0.39.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.16
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.18d60
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.20
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.20.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.28
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.28.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.31
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.31.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.45.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.47.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.48.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.112.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.114.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.115.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.124.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.155.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.159.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.125.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version10.0.0.584
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version10.0.12.10
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version10.0.12.36
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version10.0.22.87
   Microsoft ≫ Windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.81% 0.886
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:C/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html
http://secunia.com/advisories/38241
http://support.apple.com/kb/HT4004
http://www.vupen.com/english/advisories/2010/0173
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html
http://secunia.com/advisories/37584
Vendor Advisory
http://secunia.com/advisories/37902
http://securitytracker.com/id?1023307
Patch
http://www.adobe.com/support/security/bulletins/apsb09-19.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/37199
http://www.us-cert.gov/cas/techalerts/TA09-343A.html
US Government Resource
http://www.vupen.com/english/advisories/2009/3456
Patch
Vendor Advisory
http://osvdb.org/60891
https://exchange.xforce.ibmcloud.com/vulnerabilities/54637
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6663