Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a "local sandbox vulnerability."
CVSS Details
- CVSS 3.1 Base Score: 6.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Air | — | Upgrade to the latest version of Adobe AIR | Mar 21, 2012 | Jul 31, 2009 |
| Adobe Flash Apsb09 10 | — | Upgrade to Adobe Flash Player version 9.0.246.0 for Mac OS XUpgrade to Adobe Flash Player version 10.0.32.18 for Mac OS XUpgrade to Adobe Flash Player version 10.0.32.18 for WindowsUpgrade to Adobe Flash Player version 9.0.246.0 for WindowsUpgrade to Adobe Flash Player version 9.0.246.0 for LinuxUpgrade to Adobe Flash Player version 10.0.32.18 for Linux | Nov 19, 2012 | Jul 31, 2009 |
| Adobe Reader Apsb09 10 | — | — | Apr 12, 2012 | Jul 31, 2009 |
| Apple Osx Flashplayerplugin | — | Upgrade macOS to the latest version | Dec 16, 2011 | Jul 31, 2009 |
| Gentoo Linux | — | Upgrade app-text/acroread.Upgrade www-plugins/adobe-flash. | Oct 30, 2017 | Jul 31, 2009 |
| Suse | — | Upgrade flash-playerUpgrade flash-player-gnome | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade adobe-flashpluginUpgrade flashplugin-nonfree | Nov 19, 2024 | Jul 31, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub