Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP response headers.
CVSS Details
- CVSS 3.1 Base Score: 4.7
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Adobe Flash Apsb08 20 | — | Upgrade to Adobe Flash Player version 9.0.151.0 for LinuxUpgrade to Adobe Flash Player version 10.0.12.36 for Mac OS XUpgrade to Adobe Flash Player version 9.0.151.0 for Mac OS XUpgrade to Adobe Flash Player version 10.0.12.36 for WindowsUpgrade to Adobe Flash Player version 9.0.151.0 for WindowsUpgrade to Adobe Flash Player version 10.0.12.36 for Linux | Jul 11, 2013 | Nov 10, 2008 |
| Apple Osx Flashplayerplugin | — | Apply OS X security update 2008-008Upgrade macOS to the latest version | Dec 16, 2011 | Nov 10, 2008 |
| Gentoo Linux | — | Upgrade www-plugins/adobe-flash. | Oct 30, 2017 | Nov 10, 2008 |
| Ubuntu | — | Upgrade flashplugin-nonfree | Nov 19, 2024 | Nov 10, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub