Home > Vulnerability Database > CVE-2008-4503

Mend.io Vulnerability Database

CVE-2008-4503

Date: October 9, 2008

The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking."

Severity Score

5.6

Related Resources (24)

Url: http://secunia.com/advisories/34226

Url: http://www.redhat.com/support/errata/RHSA-2008-0980.html

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/45721

Url: http://security.gentoo.org/glsa/glsa-200903-23.xml

Url: http://secunia.com/advisories/32163

Url: http://secunia.com/advisories/32702

Url: http://secunia.com/advisories/32448

Url: http://ha.ckers.org/blog/20081007/clickjacking-details/

Url: http://www.adobe.com/support/security/advisories/apsa08-08.html

Url: http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1

Url: http://blog.guya.net/2008/10/07/malicious-camera-spying-using-clickjacking/

Url: http://www.adobe.com/support/security/bulletins/apsb08-18.html

Url: http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html

Url: http://secunia.com/advisories/32759

Url: http://www.redhat.com/support/errata/RHSA-2008-0945.html

Url: http://secunia.com/advisories/33390

Url: http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm

Url: http://www.vupen.com/english/advisories/2008/2764

Url: http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2008-4503

Url: http://www.securitytracker.com/id?1020996

Url: http://www.securityfocus.com/bid/31625

Url: https://nvd.nist.gov/vuln/detail/CVE-2008-4503

Url: https://www.mend.io/vulnerability-database/CVE-2008-4503

Severity Score

5.6

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2008-4503

Date: October 9, 2008

Severity Score

Related Resources (24)

Severity Score

CVSS v3.1

CVSS v2

Do you need more information?