[Forgot Password]
Login  Register Subscribe

24003

 
 

131517

 
 

106904

 
 

909

 
 

84902

 
 

134

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2008-1655Date: (C)2008-04-09   (M)2018-02-19


Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : CVSS Score : 4.3
Exploit Score: Exploit Score: 8.6
Impact Score: Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: Access Vector: NETWORK
Attack Complexity: Access Complexity: MEDIUM
Privileges Required: Authentication: NONE
User Interaction: Confidentiality: NONE
Scope: Integrity: PARTIAL
Confidentiality: Availability: NONE
Integrity:  
Availability:  
  
Reference:
SECTRACK-1019808
SUNALERT-238305
BID-28697
SECUNIA-29763
SECUNIA-29865
SECUNIA-30430
SECUNIA-30507
OSVDB-44283
ADV-2008-1697
ADV-2008-1724
APPLE-SA-2008-05-28
GLSA-200804-21
RHSA-2008:0221
SUSE-SA:2008:022
TA08-100A
TA08-150A
adobe-flash-dnsrebinding-security-bypass(41807)
http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html#goal_dns
http://www.adobe.com/support/security/bulletins/apsb08-11.html

CPE    1
cpe:/a:adobe:flash_player:9.0.115.0
CWE    1
CWE-79
OVAL    8
oval:org.secpod.oval:def:9349
oval:org.secpod.oval:def:9808
oval:org.secpod.oval:def:9809
oval:org.secpod.oval:def:9818
...

© 2013 SecPod Technologies