CVE-2008-1655 Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
MediumCVSS 4.3
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Adobe air | = 1.0 | No fix listed |
| Adobe flash player | <= 9.0.115.0 | No fix listed |
| Adobe flex | = 3.0 | No fix listed |
References
- APPLE-SA-2008-05-28 vendor-advisory
- SUSE-SA:2008:022 vendor-advisory
- 29763 third-party-advisory
- 29865 third-party-advisory
- 30430 third-party-advisory
- 30507 third-party-advisory
- 238305 vendor-advisory
- www.adobe.com
- www.adobe.com
- GLSA-200804-21 vendor-advisory
- 44283 vdb-entry
- RHSA-2008:0221 vendor-advisory
- 28697 vdb-entry
- 1019808 vdb-entry
- TA08-100A third-party-advisory us-government-resource
- TA08-150A third-party-advisory us-government-resource
- ADV-2008-1697 vdb-entry
- ADV-2008-1724 vdb-entry
- adobe-flash-dnsrebinding-security-bypass(41807) vdb-entry
- oval:org.mitre.oval:def:10724 signature vdb-entry