Lucene search

[email protected]CVE-2009-0114

HistoryFeb 26, 2009 - 4:17 p.m.

CVE-2009-0114

2009-02-2616:17:19

[email protected]

web.nvd.nist.gov

cve-2009-0114

adobe flash player

settings manager

remote attack

clickjacking

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

7.4 High

AI Score

Confidence

High

0.016 Low

EPSS

Percentile

87.6%

JSON

Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL via unknown vectors, related to “a potential Clickjacking issue variant.”

Affected configurations

NVD

Node

adobeairMatch1.5

adobeflash_playerRange≤10.0.12.36

adobeflash_playerMatch7.0

adobeflash_playerMatch7.0.1

adobeflash_playerMatch7.0.25

adobeflash_playerMatch7.0.63

adobeflash_playerMatch7.0.63linux

adobeflash_playerMatch7.0.69.0

adobeflash_playerMatch7.0.70.0

adobeflash_playerMatch7.1

adobeflash_playerMatch7.1.1

adobeflash_playerMatch7.2

adobeflash_playerMatch8.0

adobeflash_playerMatch8.0basic

adobeflash_playerMatch8.0pro

adobeflash_playerMatch8.0.24.0

adobeflash_playerMatch8.0.34.0

adobeflash_playerMatch8.0.35.0

adobeflash_playerMatch8.0.39.0

adobeflash_playerMatch9.0.16

adobeflash_playerMatch9.0.20

adobeflash_playerMatch9.0.20.0

adobeflash_playerMatch9.0.28

adobeflash_playerMatch9.0.28.0

adobeflash_playerMatch9.0.31.0

adobeflash_playerMatch9.0.45.0

adobeflash_playerMatch9.0.47.0

adobeflash_playerMatch9.0.48.0

adobeflash_playerMatch9.0.112.0

adobeflash_playerMatch9.0.114.0

adobeflash_playerMatch9.0.115.0

adobeflash_playerMatch9.0.124.0

adobeflash_playerMatch10.0.0.584

adobeflash_playerMatch10.0.12.10

adobeflash_playerMatchcs3pro

adobeflash_playerMatchcs4pro

adobeflash_player_for_linuxRange≤10.0.15.3

adobeflexMatch3.0

AND

microsoftwindows

CPENameOperatorVersion
adobe:airadobe aireq1.5
adobe:flash_playeradobe flash playerle10.0.12.36
adobe:flash_playeradobe flash playereq7.0
adobe:flash_playeradobe flash playereq7.0.1
adobe:flash_playeradobe flash playereq7.0.25
adobe:flash_playeradobe flash playereq7.0.63
adobe:flash_playeradobe flash playereq7.0.69.0
adobe:flash_playeradobe flash playereq7.0.70.0
adobe:flash_playeradobe flash playereq7.1
adobe:flash_playeradobe flash playereq7.1.1

CPE	Name	Operator	Version
adobe:air	adobe air	eq	1.5
adobe:flash_player	adobe flash player	le	10.0.12.36
adobe:flash_player	adobe flash player	eq	7.0
adobe:flash_player	adobe flash player	eq	7.0.1
adobe:flash_player	adobe flash player	eq	7.0.25
adobe:flash_player	adobe flash player	eq	7.0.63
adobe:flash_player	adobe flash player	eq	7.0.69.0
adobe:flash_player	adobe flash player	eq	7.0.70.0
adobe:flash_player	adobe flash player	eq	7.1
adobe:flash_player	adobe flash player	eq	7.1.1