CVE-2008-3873
published 2008-08-29CVE-2008-3873: The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is…
PriorityP272medium4.3CVSS 2.0
AVNACMAuNCNINAP
ITWVulnCheck KEV
Exploited in the wild
EPSS
3.66%
88.2th percentile
The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008.
Detection & IOCsextracted from sources · hover to see the quote
- →Monitor for ActionScript calls to System.setClipboard method, which can silently populate the clipboard with attacker-controlled URLs without user interaction. ↗
- →Flag clipboard contents that contain unexpected URLs following Flash content rendering, as this attack was exploited in the wild and requires no user interaction to place malicious URLs into the clipboard. ↗
- ·The vulnerability affects Adobe Flash Player 9.0.124.0 and all earlier versions; patched versions are addressed in RHSA-2008-0945 and RHSA-2008-0980. ↗
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
vulncheck4.3MEDIUM
vendor_redhat4.3MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
flash: clipboard hijack attack
vendor_redhat·2008-08-18·CVSS 4.3
CVE-2008-3873 [MEDIUM] flash: clipboard hijack attack
flash: clipboard hijack attack
The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008.
GHSA
GHSA-2m26-jxg5-74r8: The System
ghsa_unreviewed·2022-05-02
CVE-2008-3873 [MEDIUM] GHSA-2m26-jxg5-74r8: The System
The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008.
VulnCheck
Adobe Flash Player 9.0.124.0 and earlier System.setClipboard method in ActionScript Vulnerability
vulncheck·2008·CVSS 4.3
CVE-2008-3873 [MEDIUM] Adobe Flash Player 9.0.124.0 and earlier System.setClipboard method in ActionScript Vulnerability
Adobe Flash Player 9.0.124.0 and earlier System.setClipboard method in ActionScript Vulnerability
The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008.
Affected: Adobe Flash Player
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://nvd.nist.gov/vuln/detail/CVE-2008-3873; https://www.cve.org/CVERecord?id=CVE-2008-3873
No detection rules found.
No public exploits indexed.
http://blogs.adobe.com/psirt/2008/08/clipboard_attack.htmlhttp://blogs.zdnet.com/security/?p=1733http://blogs.zdnet.com/security/?p=1759http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.htmlhttp://secunia.com/advisories/32448http://secunia.com/advisories/32702http://secunia.com/advisories/32759http://secunia.com/advisories/33390http://secunia.com/advisories/34226http://security.gentoo.org/glsa/glsa-200903-23.xmlhttp://securitytracker.com/id?1020724http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1http://support.avaya.com/elmodocs2/security/ASA-2008-440.htmhttp://support.avaya.com/elmodocs2/security/ASA-2009-020.htmhttp://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.htmlhttp://www.adobe.com/support/security/bulletins/apsb08-18.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0945.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0980.htmlhttp://www.securityfocus.com/bid/31117http://www.vupen.com/english/advisories/2008/2838https://exchange.xforce.ibmcloud.com/vulnerabilities/44584http://blogs.adobe.com/psirt/2008/08/clipboard_attack.htmlhttp://blogs.zdnet.com/security/?p=1733http://blogs.zdnet.com/security/?p=1759http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.htmlhttp://secunia.com/advisories/32448http://secunia.com/advisories/32702http://secunia.com/advisories/32759http://secunia.com/advisories/33390http://secunia.com/advisories/34226http://security.gentoo.org/glsa/glsa-200903-23.xmlhttp://securitytracker.com/id?1020724http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1http://support.avaya.com/elmodocs2/security/ASA-2008-440.htmhttp://support.avaya.com/elmodocs2/security/ASA-2009-020.htmhttp://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.htmlhttp://www.adobe.com/support/security/bulletins/apsb08-18.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0945.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0980.htmlhttp://www.securityfocus.com/bid/31117http://www.vupen.com/english/advisories/2008/2838https://exchange.xforce.ibmcloud.com/vulnerabilities/44584
2008-08-29
Published
Exploited in the wild