Adobe

Flash Player

1084 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.3

CVE-2008-4824

  • EPSS 32.7%
  • Veröffentlicht 17.11.2008 22:21:26
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."

4.3

CVE-2008-4818

  • EPSS 9.8%
  • Veröffentlicht 10.11.2008 14:12:55
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP response headers.

6.8

CVE-2008-4819

  • EPSS 17.04%
  • Veröffentlicht 10.11.2008 14:12:55
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in Adobe Flash Player 9.0.124.0 and earlier makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.

7.1

CVE-2008-4820

  • EPSS 3.95%
  • Veröffentlicht 10.11.2008 14:12:55
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.

4.3

CVE-2008-4821

  • EPSS 3.89%
  • Veröffentlicht 10.11.2008 14:12:55
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors.

6.8

CVE-2008-4822

  • EPSS 12.14%
  • Veröffentlicht 10.11.2008 14:12:55
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to bypass a non-root domain policy.

4.3

CVE-2008-4823

  • EPSS 9.8%
  • Veröffentlicht 10.11.2008 14:12:55
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute.

10

CVE-2008-4401

  • EPSS 8.68%
  • Veröffentlicht 17.10.2008 19:31:15
  • Zuletzt bearbeitet 09.04.2025 00:30:58

ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the FileReference.browse operation in the FileReference upload API or (2) the FileReference.download operation in the FileReference dow...

9.3

CVE-2008-4473

  • EPSS 27.47%
  • Veröffentlicht 17.10.2008 19:31:15
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Multiple heap-based buffer overflows in Adobe Flash CS3 Professional on Windows and Flash MX 2004 allow remote attackers to execute arbitrary code via an SWF file containing long control parameters.

4.3

CVE-2008-4546

Exploit
  • EPSS 35.51%
  • Veröffentlicht 14.10.2008 15:28:16
  • Zuletzt bearbeitet 09.04.2025 00:30:58

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP reque...