Description
Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 9.0.124.0-1.el5 | RHSA-2008:0221 |
| RHEL 4 | flash-plugin | 9.0.124.0-1.el4 | RHSA-2008:0221 |
| RHEL 3 | flash-plugin | 9.0.124.0-1.el3.with.oss | RHSA-2008:0221 |
Advisories 1
- RHSA-2008:0221 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026