NVD

Id
4326  
Name
CVE-2008-4503  
Description
The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking."  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-10-09  
Modified Date
2011-03-07  
Seq
2008-4503  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
27377 4326 CVE-2008-4503 http://blog.guya.net/2008/10/07/malicious-camera-spying-using-clickjacking/  View
27378 4326 CVE-2008-4503 http://ha.ckers.org/blog/20081007/clickjacking-details/  View
27379 4326 CVE-2008-4503 SUSE-SR:2008:025  View
27380 4326 CVE-2008-4503 GLSA-200903-23  View
27381 4326 CVE-2008-4503 248586  View
27382 4326 CVE-2008-4503 http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm  View
27383 4326 CVE-2008-4503 http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm  View
27384 4326 CVE-2008-4503 http://www.adobe.com/support/security/advisories/apsa08-08.html  View
27385 4326 CVE-2008-4503 http://www.adobe.com/support/security/bulletins/apsb08-18.html  View
27386 4326 CVE-2008-4503 RHSA-2008:0945  View
27387 4326 CVE-2008-4503 RHSA-2008:0980  View
27388 4326 CVE-2008-4503 31625  View
27389 4326 CVE-2008-4503 1020996  View
27390 4326 CVE-2008-4503 ADV-2008-2764  View
27391 4326 CVE-2008-4503 adobe-flash-click-hijacking(45721)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46496 JVNDB-2008-001806 Adobe Flash Player における標準のグラフィカルな要素と偽るアクセス制御対話に関わる脆弱性 Adobe Flash Player の Settings Manager には、標準のグラフィカルな要素と偽るアクセス制御対話により、リンクか対話かを知らせずにクリックさせるのを許容する脆弱性が存在します。 CVE-2008-4503 34616 CVE-2008-4503 4326 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001806.html 2008-10-07 2009-02-10 View