cbcvebase.
CVE-2009-3951
published 2009-12-10

CVE-2009-3951: Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote…

PriorityP429high7.1CVSS 2.0
AVNACMAuNCCINAN
EPSS
3.81%
88.9th percentile
Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4820.

Affected

44 ranges· showing 25
VendorProductVersion rangeFixed in
adobeadobe_air<= 1.5.2—
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeadobe_air——
adobeflash_player<= 10.0.32.18—
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
adobeflash_player——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.