Description
Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL via unknown vectors, related to "a potential Clickjacking issue variant."
References
- http://isc.sans.org/diary.html?storyid=5929
- http://support.apple.com/kb/HT3549
- oval:org.mitre.oval:def:16419 vdb-entry signature
- 35074 third-party-advisory
- oval:org.mitre.oval:def:6662 vdb-entry signature
- 34226 third-party-advisory
- flash-settings-manager-click-hijacking(48902) vdb-entry
- APPLE-SA-2009-05-12 vendor-advisory
- 1021751 vdb-entry
- ADV-2009-0743 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb09-01.html
- ADV-2009-0513 vdb-entry
- GLSA-200903-23 vendor-advisory
- TA09-133A third-party-advisory
- ADV-2009-1297 vdb-entry
- 34293 third-party-advisory
- 254909 vendor-advisory