Description
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a "local sandbox vulnerability."
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 10.0.32.18-2.el5 | RHSA-2009:1188 |
| RHEL 4 | flash-plugin | 9.0.246.0-2.el4 | RHSA-2009:1189 |
| RHEL 3 | flash-plugin | 9.0.246.0-2.el3.with.oss | RHSA-2009:1189 |
Advisories 2
- RHSA-2009:1189 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
- RHSA-2009:1188 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- 266108 vendor-advisory
- APPLE-SA-2009-09-10-1 vendor-advisory
- GLSA-200908-04 vendor-advisory
- http://support.apple.com/kb/HT3864
- 56778 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb09-13.html
- 1022629 vdb-entry
- oval:org.mitre.oval:def:6648 vdb-entry signature
- APPLE-SA-2009-09-10-2 vendor-advisory
- 35908 vdb-entry
- ADV-2009-2086 vdb-entry
- 35890 vdb-entry
- http://www.adobe.com/support/security/bulletins/apsb09-10.html
- 36374 third-party-advisory
- http://support.apple.com/kb/HT3865
- 36193 third-party-advisory
- oval:org.mitre.oval:def:15887 vdb-entry signature
- 36701 third-party-advisory
- flash-air-sandbox-info-disclosure(52180) vdb-entry