CVE-2008-1655
published 2008-04-09CVE-2008-1655: Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding…
PriorityP422medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
4.90%
91.1th percentile
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | air | — | — |
| adobe | flash_player | <= 9.0.115.0 | — |
| adobe | flex | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
vendor_redhat4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-6443-g69m-2px6: Unspecified vulnerability in Adobe Flash Player 9
ghsa_unreviewed·2022-05-01
CVE-2008-1655 [MEDIUM] CWE-79 GHSA-6443-g69m-2px6: Unspecified vulnerability in Adobe Flash Player 9
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
Red Hat
Flash Player DNS rebind flaw
vendor_redhat·2008-04-08·CVSS 4.3
CVE-2008-1655 [MEDIUM] Flash Player DNS rebind flaw
Flash Player DNS rebind flaw
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
No detection rules found.
No public exploits indexed.
http://lists.apple.com/archives/security-announce/2008//May/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.htmlhttp://secunia.com/advisories/29763http://secunia.com/advisories/29865http://secunia.com/advisories/30430http://secunia.com/advisories/30507http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html#goal_dnshttp://www.adobe.com/support/security/bulletins/apsb08-11.htmlhttp://www.gentoo.org/security/en/glsa/glsa-200804-21.xmlhttp://www.osvdb.org/44283http://www.redhat.com/support/errata/RHSA-2008-0221.htmlhttp://www.securityfocus.com/bid/28697http://www.securitytracker.com/id?1019808http://www.us-cert.gov/cas/techalerts/TA08-100A.htmlhttp://www.us-cert.gov/cas/techalerts/TA08-150A.htmlhttp://www.vupen.com/english/advisories/2008/1697http://www.vupen.com/english/advisories/2008/1724/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/41807https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10724http://lists.apple.com/archives/security-announce/2008//May/msg00001.htmlhttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.htmlhttp://secunia.com/advisories/29763http://secunia.com/advisories/29865http://secunia.com/advisories/30430http://secunia.com/advisories/30507http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html#goal_dnshttp://www.adobe.com/support/security/bulletins/apsb08-11.htmlhttp://www.gentoo.org/security/en/glsa/glsa-200804-21.xmlhttp://www.osvdb.org/44283http://www.redhat.com/support/errata/RHSA-2008-0221.htmlhttp://www.securityfocus.com/bid/28697http://www.securitytracker.com/id?1019808http://www.us-cert.gov/cas/techalerts/TA08-100A.htmlhttp://www.us-cert.gov/cas/techalerts/TA08-150A.htmlhttp://www.vupen.com/english/advisories/2008/1697http://www.vupen.com/english/advisories/2008/1724/referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/41807https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10724
2008-04-09
Published