[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2008-3873Date: (C)2008-08-29   (M)2023-12-22


The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: NONE
Availability: PARTIAL
  
Reference:
SECTRACK-1020724
SUNALERT-248586
BID-31117
SECUNIA-32448
SECUNIA-32702
SECUNIA-32759
SECUNIA-33390
SECUNIA-34226
ADV-2008-2838
GLSA-200903-23
RHSA-2008:0945
RHSA-2008:0980
SUSE-SR:2008:025
adobe-flash-setclipboard-hijacking(44584)
http://blogs.adobe.com/psirt/2008/08/clipboard_attack.html
http://blogs.zdnet.com/security/?p=1733
http://blogs.zdnet.com/security/?p=1759
http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm
http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=
http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html
http://www.adobe.com/support/security/bulletins/apsb08-18.html

CPE    1
cpe:/a:adobe:flash_player
OVAL    6
oval:org.secpod.oval:def:18054
oval:org.secpod.oval:def:17858
oval:org.secpod.oval:def:18003
oval:org.secpod.oval:def:18055
...

© SecPod Technologies