NVD

Id
4227  
Name
CVE-2008-4401  
Description
ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the FileReference.browse operation in the FileReference upload API or (2) the FileReference.download operation in the FileReference download API, which allows remote attackers to create a browse dialog box, and possibly have unspecified other impact, via an SWF file.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-17  
Modified Date
2011-03-07  
Seq
2008-4401  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26859 4227 CVE-2008-4401 SUSE-SR:2008:025  View
26860 4227 CVE-2008-4401 GLSA-200903-23  View
26861 4227 CVE-2008-4401 1021061  View
26862 4227 CVE-2008-4401 248586  View
26863 4227 CVE-2008-4401 http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm  View
26864 4227 CVE-2008-4401 http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm  View
26865 4227 CVE-2008-4401 http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html  View
26866 4227 CVE-2008-4401 http://www.adobe.com/support/security/bulletins/apsb08-18.html  View
26867 4227 CVE-2008-4401 RHSA-2008:0945  View
26868 4227 CVE-2008-4401 RHSA-2008:0980  View
26869 4227 CVE-2008-4401 ADV-2008-2838  View
26870 4227 CVE-2008-4401 adobe-flash-filereference-file-upload(45913)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46566 JVNDB-2008-001876 Adobe Flash Player の ActionScript におけるファイルアップロード/ダウンロードのダイアログボックスを表示可能な脆弱性 Adobe Flash Player の ActionScript には、FileReference アップロード API 内の FileReference.browse オペレーション または FileReference ダウンロード API 内の FileReference.download オペレーションに関して、ユーザ操作を必要とせずにダイアログボックスを表示される脆弱性が存在します。 CVE-2008-4401 34514 CVE-2008-4401 4227 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001876.html 2008-10-15 2009-02-10 View