CVE-2008-4503
published 2008-10-09CVE-2008-4503: The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access…
PriorityP333medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
4.18%
89.9th percentile
The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking."
Affected
20 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| adobe | flash_player | <= 9.0.124.0 | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
| adobe | flash_player | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
Adobe Flash Player clickjacking
vendor_redhat·2008-10-07·CVSS 6.8
CVE-2008-4503 [MEDIUM] Adobe Flash Player clickjacking
Adobe Flash Player clickjacking
The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking."
GHSA
GHSA-7rhm-jv98-85qw: The Settings Manager in Adobe Flash Player 9
ghsa_unreviewed·2022-05-02
CVE-2008-4503 [MEDIUM] GHSA-7rhm-jv98-85qw: The Settings Manager in Adobe Flash Player 9
The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking."
No detection rules found.
No public exploits indexed.
http://blog.guya.net/2008/10/07/malicious-camera-spying-using-clickjacking/http://ha.ckers.org/blog/20081007/clickjacking-details/http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.htmlhttp://secunia.com/advisories/32163http://secunia.com/advisories/32448http://secunia.com/advisories/32702http://secunia.com/advisories/32759http://secunia.com/advisories/33390http://secunia.com/advisories/34226http://security.gentoo.org/glsa/glsa-200903-23.xmlhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1http://support.avaya.com/elmodocs2/security/ASA-2008-440.htmhttp://support.avaya.com/elmodocs2/security/ASA-2009-020.htmhttp://www.adobe.com/support/security/advisories/apsa08-08.htmlhttp://www.adobe.com/support/security/bulletins/apsb08-18.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0945.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0980.htmlhttp://www.securityfocus.com/bid/31625http://www.securitytracker.com/id?1020996http://www.vupen.com/english/advisories/2008/2764https://exchange.xforce.ibmcloud.com/vulnerabilities/45721http://blog.guya.net/2008/10/07/malicious-camera-spying-using-clickjacking/http://ha.ckers.org/blog/20081007/clickjacking-details/http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.htmlhttp://secunia.com/advisories/32163http://secunia.com/advisories/32448http://secunia.com/advisories/32702http://secunia.com/advisories/32759http://secunia.com/advisories/33390http://secunia.com/advisories/34226http://security.gentoo.org/glsa/glsa-200903-23.xmlhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1http://support.avaya.com/elmodocs2/security/ASA-2008-440.htmhttp://support.avaya.com/elmodocs2/security/ASA-2009-020.htmhttp://www.adobe.com/support/security/advisories/apsa08-08.htmlhttp://www.adobe.com/support/security/bulletins/apsb08-18.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0945.htmlhttp://www.redhat.com/support/errata/RHSA-2008-0980.htmlhttp://www.securityfocus.com/bid/31625http://www.securitytracker.com/id?1020996http://www.vupen.com/english/advisories/2008/2764https://exchange.xforce.ibmcloud.com/vulnerabilities/45721
2008-10-09
Published