7.1

CVE-2009-3951

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4820.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Adobe Air Version <= 1.5.2
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version 1.0
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version 1.0.1
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version 1.1
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version 1.5.1
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version <= 10.0.32.18
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 7.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 7.0.1
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 7.0.25
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 7.0.63
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 7.0.69.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 7.0.70.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 7.1
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 7.1.1
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 7.2
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 8 Edition pro
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 8 Edition professional
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 8.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 8.0 Edition basic
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 8.0 Edition pro
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 8.0.24.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 8.0.34.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 8.0.35.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 8.0.39.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.16
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.18d60
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.20
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.20.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.28
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.28.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.31
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.31.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.45.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.47.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.48.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.112.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.114.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.115.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.124.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.155.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.0.159.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 9.125.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 10.0.0.584
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 10.0.12.10
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 10.0.12.36
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version 10.0.22.87
   Microsoft ≫ Windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.81% 0.886
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:C/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html
http://secunia.com/advisories/38241
http://support.apple.com/kb/HT4004
http://www.vupen.com/english/advisories/2010/0173
http://lists.opensuse.org/opensuse-security-announce/2009-12/msg00003.html
http://secunia.com/advisories/37584
Vendor Advisory
http://secunia.com/advisories/37902
http://securitytracker.com/id?1023307
Patch
http://www.adobe.com/support/security/bulletins/apsb09-19.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/37199
http://www.us-cert.gov/cas/techalerts/TA09-343A.html
US Government Resource
http://www.vupen.com/english/advisories/2009/3456
Patch
Vendor Advisory
http://osvdb.org/60891
https://exchange.xforce.ibmcloud.com/vulnerabilities/54637
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6663