Improper input validation in Adobe Flash Player

CVE-2008-4824

Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.133 (96.0th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (x_refsource_CONFIRM, Broken Link)
  • cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (Third Party Advisory, x_refsource_MISC)
  • cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
  • cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
  • cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_CERT, third-party-advisory)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)