CVE-2008-5108: Code Injection

Q: What is the severity of CVE-2008-5108?

CVE-2008-5108 is considered a critical vulnerability due to the potential for executing untrusted JavaScript in Adobe AIR applications.

Q: How do I fix CVE-2008-5108?

To mitigate CVE-2008-5108, update Adobe AIR to a version later than 1.1 as Adobe has released patches for this vulnerability.

Q: What software is affected by CVE-2008-5108?

CVE-2008-5108 affects Adobe AIR versions 1.1 and earlier, including version 1.0.

Q: What type of attack does CVE-2008-5108 involve?

CVE-2008-5108 involves context-dependent attacks that allow the execution of untrusted JavaScript within an AIR application.

Q: What is Adobe AIR?

Adobe AIR is a cross-platform runtime environment that allows developers to create rich internet applications using web technologies.

Published Nov 17, 2008

Updated

Unspecified vulnerability in Adobe AIR 1.1 and earlier allows context-dependent attackers to execute untrusted JavaScript in an AIR application via unknown attack vectors.

Affected Software

2 affected components

Adobe Adobe AIR=1.0

Adobe Adobe AIR<=1.1

Remediation

Patch Available

http://www.adobe.com/support/security/bulletins/apsb08-23.html

Event History

Nov 17, 2008

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-5108?

CVE-2008-5108 is considered a critical vulnerability due to the potential for executing untrusted JavaScript in Adobe AIR applications.

How do I fix CVE-2008-5108?