CVE

Id
32757  
CVE No.
CVE-2008-2640  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and generated applications, allow remote attackers to inject arbitrary web script or HTML via the anchor identifier to (1) client-side-detection-with-history/history/historyFrame.html, (2) express-installation-with-history/history/historyFrame.html, or (3) no-player-detection-with-history/history/historyFrame.html in templates/html-templates/. NOTE: Firefox 2.0 and possibly other browsers prevent exploitation.  
Phase
Assigned (20080609)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
354494 32757 CVE-2008-2640 MISC:http://blog.watchfire.com/wfblog/2008/06/javascript-code.html  View
354495 32757 CVE-2008-2640 CONFIRM:http://www.adobe.com/support/security/bulletins/apsb08-14.html  View
354496 32757 CVE-2008-2640 BID:29778  View
354497 32757 CVE-2008-2640 URL:http://www.securityfocus.com/bid/29778  View
354498 32757 CVE-2008-2640 VUPEN:ADV-2008-1862  View
354499 32757 CVE-2008-2640 URL:http://www.vupen.com/english/advisories/2008/1862  View
354500 32757 CVE-2008-2640 SECTRACK:1020301  View
354501 32757 CVE-2008-2640 URL:http://securitytracker.com/id?1020301  View
354502 32757 CVE-2008-2640 SECUNIA:30746  View
354503 32757 CVE-2008-2640 URL:http://secunia.com/advisories/30746  View
354504 32757 CVE-2008-2640 XF:adobeflex-historymanagement-xss(43150)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50565 JVNDB-2008-005875 SMEWeb における任意の Web スクリプトまたは HTML を挿入される脆弱性 SMEWeb には、任意の Web スクリプトまたは HTML を挿入される脆弱性が存在します。 CVE-2008-2644 32757 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005875.html  View