CVE-2008-3873: Medium severity macromedia flash player vulnerability

Published Aug 29, 2008

Updated

The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008.

Affected Software

1 affected component

Adobe Flash Player

Event History

Aug 29, 2008

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3873?

CVE-2008-3873 is considered a critical vulnerability due to its potential for clipboard manipulation without user consent.

How do I fix CVE-2008-3873?

To resolve CVE-2008-3873, users should upgrade to Adobe Flash Player version 9.0.124.1 or later, which addresses this vulnerability.

What should I be aware of regarding CVE-2008-3873?

CVE-2008-3873 allows attackers to place difficult-to-remove URLs in the clipboard, posing risks of phishing or unwanted redirects.

Who is primarily affected by CVE-2008-3873?

Users of Adobe Flash Player versions 9.0.124.0 and earlier are primarily affected by CVE-2008-3873.

When was CVE-2008-3873 exploited in the wild?

CVE-2008-3873 was actively exploited in the wild starting in August 2008.