ByteOS Network

Vulnerability Details :

CVE-2008-4401

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-17 Oct, 2008 | 18:00

Updated At-07 Aug, 2024 | 10:17

ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the FileReference.browse operation in the FileReference upload API or (2) the FileReference.download operation in the FileReference download API, which allows remote attackers to create a browse dialog box, and possibly have unspecified other impact, via an SWF file.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:17 Oct, 2008 | 18:00

Updated At:07 Aug, 2024 | 10:17

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://secunia.com/advisories/33390	third-party-advisory x_refsource_SECUNIA
http://www.adobe.com/support/security/bulletins/apsb08-18.html	x_refsource_CONFIRM
http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm	x_refsource_CONFIRM
http://secunia.com/advisories/32270	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/32702	third-party-advisory x_refsource_SECUNIA
http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html	x_refsource_CONFIRM
http://secunia.com/advisories/34226	third-party-advisory x_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/2838	vdb-entry x_refsource_VUPEN
http://securitytracker.com/id?1021061	vdb-entry x_refsource_SECTRACK
http://security.gentoo.org/glsa/glsa-200903-23.xml	vendor-advisory x_refsource_GENTOO
http://secunia.com/advisories/32759	third-party-advisory x_refsource_SECUNIA
http://www.redhat.com/support/errata/RHSA-2008-0945.html	vendor-advisory x_refsource_REDHAT
http://www.redhat.com/support/errata/RHSA-2008-0980.html	vendor-advisory x_refsource_REDHAT
http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm	x_refsource_CONFIRM
http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1	vendor-advisory x_refsource_SUNALERT
http://secunia.com/advisories/32448	third-party-advisory x_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/45913	vdb-entry x_refsource_XF
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html	vendor-advisory x_refsource_SUSE

Hyperlink: http://secunia.com/advisories/33390

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb08-18.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/32270

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/32702

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/34226

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.vupen.com/english/advisories/2008/2838

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://securitytracker.com/id?1021061

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://security.gentoo.org/glsa/glsa-200903-23.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://secunia.com/advisories/32759

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0945.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0980.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm

Resource:

x_refsource_CONFIRM

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1

Resource:

vendor-advisory

x_refsource_SUNALERT

Hyperlink: http://secunia.com/advisories/32448

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/45913

Resource:

vdb-entry

x_refsource_XF

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html

Resource:

vendor-advisory

x_refsource_SUSE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://secunia.com/advisories/33390	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.adobe.com/support/security/bulletins/apsb08-18.html	x_refsource_CONFIRM x_transferred
http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/32270	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/32702	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/34226	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.vupen.com/english/advisories/2008/2838	vdb-entry x_refsource_VUPEN x_transferred
http://securitytracker.com/id?1021061	vdb-entry x_refsource_SECTRACK x_transferred
http://security.gentoo.org/glsa/glsa-200903-23.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://secunia.com/advisories/32759	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.redhat.com/support/errata/RHSA-2008-0945.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.redhat.com/support/errata/RHSA-2008-0980.html	vendor-advisory x_refsource_REDHAT x_transferred
http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm	x_refsource_CONFIRM x_transferred
http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1	vendor-advisory x_refsource_SUNALERT x_transferred
http://secunia.com/advisories/32448	third-party-advisory x_refsource_SECUNIA x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/45913	vdb-entry x_refsource_XF x_transferred
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html	vendor-advisory x_refsource_SUSE x_transferred

Hyperlink: http://secunia.com/advisories/33390

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.adobe.com/support/security/bulletins/apsb08-18.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/32270

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/32702

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/34226

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2008/2838

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://securitytracker.com/id?1021061

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-200903-23.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://secunia.com/advisories/32759

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0945.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0980.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1

Resource:

vendor-advisory

x_refsource_SUNALERT

x_transferred

Hyperlink: http://secunia.com/advisories/32448

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/45913

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:17 Oct, 2008 | 19:31

Updated At:30 Oct, 2018 | 16:26

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Adobe Inc.

>>flash_player>>Versions up to 9.0.124.0(inclusive)

cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>7.0

cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>7.0.1

cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>7.0.25

cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>7.0.63

cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>7.0.69.0

cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>7.0.70.0

cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>7.0_r67

cpe:2.3:a:adobe:flash_player:7.0_r67:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>7.1

cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>7.1.1

cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>7.2

cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>8.0

cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>8.0.24.0

cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>8.0.34.0

cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>8.0.35.0

cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>8.0.39.0

cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>9.0

cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>9.0.112.0

cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>9.0.114.0

cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*

Adobe Inc.

>>flash_player>>9.0.115.0

cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html	cve@mitre.org	N/A
http://secunia.com/advisories/32270	cve@mitre.org	Patch Vendor Advisory
http://secunia.com/advisories/32448	cve@mitre.org	N/A
http://secunia.com/advisories/32702	cve@mitre.org	N/A
http://secunia.com/advisories/32759	cve@mitre.org	N/A
http://secunia.com/advisories/33390	cve@mitre.org	N/A
http://secunia.com/advisories/34226	cve@mitre.org	N/A
http://security.gentoo.org/glsa/glsa-200903-23.xml	cve@mitre.org	N/A
http://securitytracker.com/id?1021061	cve@mitre.org	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1	cve@mitre.org	N/A
http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm	cve@mitre.org	N/A
http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm	cve@mitre.org	N/A
http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html	cve@mitre.org	N/A
http://www.adobe.com/support/security/bulletins/apsb08-18.html	cve@mitre.org	Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2008-0945.html	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2008-0980.html	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2008/2838	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/45913	cve@mitre.org	N/A