Vulnerability Details : CVE-2008-4824
Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."
Vulnerability category: Input validationExecute code
Exploit prediction scoring system (EPSS) score for CVE-2008-4824
Probability of exploitation activity in the next 30 days: 62.58%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2008-4824
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
---|---|---|---|---|---|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
[email protected] |
CWE ids for CVE-2008-4824
-
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.Assigned by: [email protected] (Primary)
References for CVE-2008-4824
-
http://support.apple.com/kb/HT3338
Third Party Advisory
-
http://www.redhat.com/support/errata/RHSA-2008-0980.html
Third Party Advisory
-
http://www.adobe.com/support/security/bulletins/apsb08-22.html
Patch;Vendor Advisory
-
http://www.isecpartners.com/advisories/2008-01-flash.txt
Third Party Advisory
-
http://www.vupen.com/english/advisories/2008/3444
Third Party Advisory
-
http://security.gentoo.org/glsa/glsa-200903-23.xml
Third Party Advisory
-
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=
Broken Link
-
http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
Mailing List;Third Party Advisory
-
http://www.us-cert.gov/cas/techalerts/TA08-350A.html
Third Party Advisory;US Government Resource
-
http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm
Third Party Advisory
-
http://www.vupen.com/english/advisories/2008/3189
Third Party Advisory
-
http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1
Broken Link
-
http://www.securityfocus.com/archive/1/498561/100/0/threaded
Third Party Advisory;VDB Entry
Products affected by CVE-2008-4824
- cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*