Skip to content
OpenAdvisories
Unscored RHSA-2008:0945 14 CVEs

Red Hat Security Advisory: flash-plugin security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 5 rhel_extras:5::client flash-plugin 0:10.0.12.36-2.el5
Red Hat · RHEL 5 rhel_extras:5::server flash-plugin 0:10.0.12.36-2.el5

Vulnerabilities 14

  • Unscored —
    CVE-2007-4324

    ActionScript 3 (AS3) in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allow…

  • Unscored —
    CVE-2007-6243

    Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the in…

  • Unscored —
    CVE-2008-3873 EPSS 17%

    The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to p…

  • Unscored —
    CVE-2008-4401

    ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the …

  • Unscored —
    CVE-2008-4503

    The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingl…

  • Unscored —
    CVE-2008-4818

    Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject …

  • Unscored —
    CVE-2008-4819

    Unspecified vulnerability in Adobe Flash Player 9.0.124.0 and earlier makes it easier for remote attackers to conduct D…

  • Unscored —
    CVE-2008-4821

    Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which …

  • Unscored —
    CVE-2008-4822

    Adobe Flash Player 9.0.124.0 and earlier does not properly interpret policy files, which allows remote attackers to byp…

  • Unscored —
    CVE-2008-4823

    Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject …

  • Unscored —
    CVE-2008-4824 EPSS 21%

    Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote…

  • Unscored —
    CVE-2008-5361

    The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR…

  • Unscored —
    CVE-2008-5362

    The DefineConstantPool action in the ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.…

  • Unscored —
    CVE-2008-5363

    The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR…

References

  • article
    http://www.redhat.com/security/updates/classification/#critical
  • article
    http://www.adobe.com/support/security/bulletins/apsb08-18.html
  • article
    http://www.adobe.com/support/security/bulletins/apsb08-20.html
  • article
    http://www.adobe.com/support/security/bulletins/apsb08-22.html
  • article
    http://labs.adobe.com/technologies/flashplayer10/
  • article
    http://www.adobe.com/products/flashplayer/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=252292
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440664
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=465736
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=466154
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=466344
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470116
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470123
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470128
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470130
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470131
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0945.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-4324
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-4324
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-4324
  • report
    https://access.redhat.com/security/cve/CVE-2007-6243
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6243
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6243
  • report
    https://access.redhat.com/security/cve/CVE-2008-3873
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3873
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3873
  • report
    https://access.redhat.com/security/cve/CVE-2008-4401
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4401
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4401
  • report
    https://access.redhat.com/security/cve/CVE-2008-4503
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4503
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4503
  • report
    https://access.redhat.com/security/cve/CVE-2008-4818
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4818
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4818
  • report
    https://access.redhat.com/security/cve/CVE-2008-4819
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-4819
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-4819
  • report
    https://access.redhat.com/security/cve/CVE-2008-4821