NVD

Id
3735  
Name
CVE-2008-3873  
Description
The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-03  
Published
2008-08-29  
Modified Date
2011-03-07  
Seq
2008-3873  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23652 3735 CVE-2008-3873 http://blogs.adobe.com/psirt/2008/08/clipboard_attack.html  View
23653 3735 CVE-2008-3873 http://blogs.zdnet.com/security/?p=1733  View
23654 3735 CVE-2008-3873 http://blogs.zdnet.com/security/?p=1759  View
23655 3735 CVE-2008-3873 SUSE-SR:2008:025  View
23656 3735 CVE-2008-3873 GLSA-200903-23  View
23657 3735 CVE-2008-3873 1020724  View
23658 3735 CVE-2008-3873 248586  View
23659 3735 CVE-2008-3873 http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm  View
23660 3735 CVE-2008-3873 http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm  View
23661 3735 CVE-2008-3873 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=  View
23662 3735 CVE-2008-3873 http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html  View
23663 3735 CVE-2008-3873 http://www.adobe.com/support/security/bulletins/apsb08-18.html  View
23664 3735 CVE-2008-3873 RHSA-2008:0945  View
23665 3735 CVE-2008-3873 RHSA-2008:0980  View
23666 3735 CVE-2008-3873 31117  View
23667 3735 CVE-2008-3873 ADV-2008-2838  View
23668 3735 CVE-2008-3873 adobe-flash-setclipboard-hijacking(44584)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46565 JVNDB-2008-001875 Adobe Flash Player の ActionScript におけるクリップボードの内容を書き換え可能な脆弱性 Adobe Flash Player の ActionScript に実装された System.setClipboard メソッドには、ユーザ操作を必要とせずにクリップボードの内容を書き換え可能な脆弱性が存在します。 CVE-2008-3873 33986 CVE-2008-3873 3735 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001875.html 2008-08-29 2009-02-10 View