Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP response headers.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Flash Apsb08 20 | — | Upgrade to Adobe Flash Player version 9.0.151.0 for WindowsUpgrade to Adobe Flash Player version 10.0.12.36 for LinuxUpgrade to Adobe Flash Player version 9.0.151.0 for Mac OS XUpgrade to Adobe Flash Player version 10.0.12.36 for Mac OS XUpgrade to Adobe Flash Player version 10.0.12.36 for WindowsUpgrade to Adobe Flash Player version 9.0.151.0 for Linux | Jul 11, 2013 | Nov 10, 2008 |
| Apple Osx Flashplayerplugin | — | Upgrade macOS to the latest versionApply OS X security update 2008-008 | Dec 16, 2011 | Nov 10, 2008 |
| Gentoo Linux | — | Upgrade www-plugins/adobe-flash. | Oct 30, 2017 | Nov 10, 2008 |
| Ubuntu | — | Upgrade flashplugin-nonfree | Nov 19, 2024 | Nov 10, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub