CVE-2009-0114: Medium severity Adobe AIR vulnerability
Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL via unknown vectors, related to "a potential Clickjacking issue variant."
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Adobe Flash Playerto a version that resolves this vulnerability.Fixed in 9.0.159.0 - Upgrade
Upgrade
Adobe Flash Playerto a version that resolves this vulnerability.Fixed in 10.0.22.87
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0114?
CVE-2009-0114 is considered a critical vulnerability that allows remote attackers to trick users into visiting arbitrary URLs.
How do I fix CVE-2009-0114?
To fix CVE-2009-0114, update your Adobe Flash Player to version 10.0.22.87 or later, or 9.0.159.0 or later for the affected versions.
Which Adobe products are affected by CVE-2009-0114?
CVE-2009-0114 affects Adobe Flash Player versions 9.x before 9.0.159.0 and 10.x before 10.0.22.87, along with Adobe AIR 1.5.
What can an attacker achieve using CVE-2009-0114?
An attacker exploiting CVE-2009-0114 can perform Clickjacking attacks that trick users into visiting malicious websites.
How can I determine if I am vulnerable to CVE-2009-0114?
You can determine vulnerability to CVE-2009-0114 by checking if you are using an affected version of Adobe Flash Player prior to the fixed versions.