[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247974

 
 

909

 
 

194654

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2008-1655Date: (C)2008-04-09   (M)2023-12-22


Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
SECTRACK-1019808
SUNALERT-238305
BID-28697
SECUNIA-29763
SECUNIA-29865
SECUNIA-30430
SECUNIA-30507
OSVDB-44283
ADV-2008-1697
ADV-2008-1724
APPLE-SA-2008-05-28
GLSA-200804-21
RHSA-2008:0221
SUSE-SA:2008:022
TA08-100A
TA08-150A
adobe-flash-dnsrebinding-security-bypass(41807)
http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html#goal_dns
http://www.adobe.com/support/security/bulletins/apsb08-11.html
oval:org.mitre.oval:def:10724

CPE    1
cpe:/a:adobe:flash_player:9.0.115.0
CWE    1
CWE-79
OVAL    8
oval:org.secpod.oval:def:9349
oval:org.secpod.oval:def:9368
oval:org.secpod.oval:def:9809
oval:org.secpod.oval:def:9352
...

© SecPod Technologies