NVD

Id
2546  
Name
CVE-2008-2640  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Flex 3 History Management feature in Adobe Flex 3.0.1 SDK and Flex Builder 3, and generated applications, allow remote attackers to inject arbitrary web script or HTML via the anchor identifier to (1) client-side-detection-with-history/history/historyFrame.html, (2) express-installation-with-history/history/historyFrame.html, or (3) no-player-detection-with-history/history/historyFrame.html in templates/html-templates/. NOTE: Firefox 2.0 and possibly other browsers prevent exploitation.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-06-18  
Modified Date
2011-03-07  
Seq
2008-2640  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
15998 2546 CVE-2008-2640 http://blog.watchfire.com/wfblog/2008/06/javascript-code.html  View
15999 2546 CVE-2008-2640 1020301  View
16000 2546 CVE-2008-2640 http://www.adobe.com/support/security/bulletins/apsb08-14.html  View
16001 2546 CVE-2008-2640 29778  View
16002 2546 CVE-2008-2640 ADV-2008-1862  View
16003 2546 CVE-2008-2640 adobeflex-historymanagement-xss(43150)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47834 JVNDB-2008-003144 複数の Adobe 製品の Flex History Management 機能におけるクロスサイトスクリプティングの脆弱性 Adobe Flex SDK、Flex Builder および生成されたアプリケーションの Flex History Management 機能には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-2640 32753 CVE-2008-2640 2546 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003144.html 2008-06-17 2012-06-26 View