Description
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 9.0.124.0-1.el5 | RHSA-2008:0221 |
| RHEL 4 | flash-plugin | 9.0.124.0-1.el4 | RHSA-2008:0221 |
| RHEL 3 | flash-plugin | 9.0.124.0-1.el3.with.oss | RHSA-2008:0221 |
Advisories 1
- RHSA-2008:0221 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 29865 third-party-advisory
- oval:org.mitre.oval:def:10724 vdb-entry signature
- 1019808 vdb-entry
- 30507 third-party-advisory
- adobe-flash-dnsrebinding-security-bypass(41807) vdb-entry
- 28697 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb08-11.html
- ADV-2008-1724 vdb-entry
- RHSA-2008:0221 vendor-advisory
- TA08-150A third-party-advisory
- 30430 third-party-advisory
- APPLE-SA-2008-05-28 vendor-advisory
- SUSE-SA:2008:022 vendor-advisory
- 29763 third-party-advisory
- 238305 vendor-advisory
- GLSA-200804-21 vendor-advisory
- 44283 vdb-entry
- ADV-2008-1697 vdb-entry
- TA08-100A third-party-advisory
- http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html#goal_dns