Vulnerabilities > Adobe > Flash Player > 9.0.16

DATE CVE VULNERABILITY TITLE RISK
2008-11-10 CVE-2008-4821 Information Exposure vulnerability in Adobe Flash Player
Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors.
4.3
2008-11-10 CVE-2008-4820 Information Exposure vulnerability in Adobe Flash Player
Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.
7.1
2008-11-10 CVE-2008-4819 Multiple Security vulnerability in Adobe Flash Player
Unspecified vulnerability in Adobe Flash Player 9.0.124.0 and earlier makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
network
adobe
6.8
2008-11-10 CVE-2008-4818 Cross-Site Scripting vulnerability in Adobe Flash Player
Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors involving HTTP response headers.
network
adobe CWE-79
4.3
2008-10-17 CVE-2008-4401 Permissions, Privileges, and Access Controls vulnerability in Adobe Flash Player
ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the FileReference.browse operation in the FileReference upload API or (2) the FileReference.download operation in the FileReference download API, which allows remote attackers to create a browse dialog box, and possibly have unspecified other impact, via an SWF file.
network
low complexity
adobe CWE-264
critical
10.0
2008-10-09 CVE-2008-4503 Clickjacking vulnerability in RETIRED: Adobe Flash Player
The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking."
network
adobe
6.8
2008-10-06 CVE-2008-3872 Permissions, Privileges, and Access Controls vulnerability in Adobe Flash Player
Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations.
network
adobe CWE-264
critical
9.3
2008-04-09 CVE-2008-1655 Cross-Site Scripting vulnerability in Adobe Air, Flash Player and Flex
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
network
adobe CWE-79
4.3
2008-04-09 CVE-2007-6019 Remote Code Execution vulnerability in Adobe Flash Player SWF File 'DeclareFunction2' ActionScript Tag
Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly.
network
adobe
critical
9.3
2008-04-09 CVE-2007-0071 Numeric Errors vulnerability in Adobe Flash Player
Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset of a NULL pointer, and triggers a buffer overflow.
network
adobe CWE-189
critical
9.3