[Forgot Password]
Login  Register Subscribe

24128

 
 

131615

 
 

111749

 
 

909

 
 

87255

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2008-1655Date: (C)2008-04-09   (M)2018-07-10


Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.3
Exploit Score: 8.6
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
SECTRACK-1019808
SUNALERT-238305
BID-28697
SECUNIA-29763
SECUNIA-29865
SECUNIA-30430
SECUNIA-30507
OSVDB-44283
ADV-2008-1697
ADV-2008-1724
APPLE-SA-2008-05-28
GLSA-200804-21
RHSA-2008:0221
SUSE-SA:2008:022
TA08-100A
TA08-150A
adobe-flash-dnsrebinding-security-bypass(41807)
http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html#goal_dns
http://www.adobe.com/support/security/bulletins/apsb08-11.html

CPE    1
cpe:/a:adobe:flash_player:9.0.115.0
CWE    1
CWE-79
OVAL    8
oval:org.secpod.oval:def:9349
oval:org.secpod.oval:def:9368
oval:org.secpod.oval:def:9352
oval:org.secpod.oval:def:9809
...

© SecPod Technologies