CVE-2008-4821: Infoleak
Published Nov 10, 2008
·Updated
Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors.
Affected Software
23 affected components
Mozilla Camino
Mozilla Firefox
Mozilla SeaMonkey
Adobe Flash Player<=9.0.124.0
Adobe Flash Player=7.0.69.0
Adobe Flash Player=8.0.39.0
Adobe Flash Player=9.0
Adobe Flash Player=9.0.16
Adobe Flash Player=9.0.16
Adobe Flash Player=9.0.18d60
Adobe Flash Player=9.0.20
Adobe Flash Player=9.0.20.0
Adobe Flash Player=9.0.28
Adobe Flash Player=9.0.28.0
Adobe Flash Player=9.0.28.0
Adobe Flash Player=9.0.31
Adobe Flash Player=9.0.31.0
Adobe Flash Player=9.0.45.0
Adobe Flash Player=9.0.47.0
Adobe Flash Player=9.0.48.0
Adobe Flash Player=9.0.112.0
Adobe Flash Player=9.0.114.0
Adobe Flash Player=9.0.115.0
Remediation
Patch Available
Event History
Nov 10, 2008
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Data Sourced
02:12 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-4821?
CVE-2008-4821 has been classified with a medium severity rating as it can lead to sensitive information disclosure.
2
How do I fix CVE-2008-4821?
To fix CVE-2008-4821, it is recommended to upgrade to Adobe Flash Player version 9.0.124.1 or later.
3
Which versions of Adobe Flash Player are affected by CVE-2008-4821?
CVE-2008-4821 affects Adobe Flash Player versions 9.0.124.0 and earlier.
4
Can CVE-2008-4821 be exploited remotely?
Yes, CVE-2008-4821 can potentially be exploited remotely through malicious jar: URLs.
5
What types of attacks are possible with CVE-2008-4821?
CVE-2008-4821 may allow attackers to obtain sensitive information through various unknown vectors.