Description
Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4820.
References
- 1023307 vdb-entry
- oval:org.mitre.oval:def:6663 vdb-entry signature
- http://support.apple.com/kb/HT4004
- APPLE-SA-2010-01-19-1 vendor-advisory
- ADV-2009-3456 vdb-entry
- SUSE-SA:2009:062 vendor-advisory
- 37584 third-party-advisory
- 37902 third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb09-19.html
- 60891 vdb-entry
- TA09-343A third-party-advisory
- 38241 third-party-advisory
- flash-activex-information-disclosure(54637) vdb-entry
- 37199 vdb-entry
- ADV-2010-0173 vdb-entry