7.1

CVE-2009-3951

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4820.

Data is provided by the National Vulnerability Database (NVD)
Adobe ≫ Adobe Air Version <= 1.5.2
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version1.0
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version1.0.1
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version1.1
   Microsoft ≫ Windows
Adobe ≫ Adobe Air Version1.5.1
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version <= 10.0.32.18
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0.1
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0.25
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0.63
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0.69.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.0.70.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.1
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.1.1
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version7.2
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8 Editionpro
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8 Editionprofessional
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0 Editionbasic
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0 Editionpro
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0.24.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0.34.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0.35.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version8.0.39.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.16
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.18d60
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.20
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.20.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.28
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.28.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.31
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.31.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.45.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.47.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.48.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.112.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.114.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.115.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.124.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.155.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.0.159.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version9.125.0
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version10.0.0.584
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version10.0.12.10
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version10.0.12.36
   Microsoft ≫ Windows
Adobe ≫ Flash Player Version10.0.22.87
   Microsoft ≫ Windows
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 6.9% 0.905
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:C/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.