NVD

Id
1596  
Name
CVE-2008-1654  
Description
Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF) style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated by changing the primary DNS server.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-04-02  
Modified Date
2011-03-07  
Seq
2008-1654  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
10272 1596 CVE-2008-1654 APPLE-SA-2008-05-28  View
10273 1596 CVE-2008-1654 SUSE-SA:2008:022  View
10274 1596 CVE-2008-1654 oval:org.mitre.oval:def:11435  View
10275 1596 CVE-2008-1654 20080113 Hacking The Interwebs  View
10276 1596 CVE-2008-1654 20080113 Hacking The Interwebs  View
10277 1596 CVE-2008-1654 238305  View
10278 1596 CVE-2008-1654 http://www.adobe.com/support/security/bulletins/apsb08-11.html  View
10279 1596 CVE-2008-1654 GLSA-200804-21  View
10280 1596 CVE-2008-1654 http://www.gnucitizen.org/blog/hacking-the-interwebs/  View
10281 1596 CVE-2008-1654 VU#347812  View
10282 1596 CVE-2008-1654 RHSA-2008:0221  View
10283 1596 CVE-2008-1654 28696  View
10284 1596 CVE-2008-1654 1019807  View
10285 1596 CVE-2008-1654 TA08-100A  View
10286 1596 CVE-2008-1654 TA08-150A  View
10287 1596 CVE-2008-1654 ADV-2008-1697  View
10288 1596 CVE-2008-1654 ADV-2008-1724  View
10289 1596 CVE-2008-1654 adobe-flash-navigatetourl-csrf(41718)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45975 JVNDB-2008-001285 ネットワーク機器において UPnP が有効になっている場合の問題 UPnP (Universal Plug and Play) に対応し、初期状態から UPnP 機能が有効になっている機器が複数のベンダから提供されています。 CVE-2008-1654 31767 CVE-2008-1654 1596 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001285.html 2008-04-02 2008-10-27 View