VulnerabilityModified
CVE-2009-0114
Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL via unknown vectors, related to…
MEDIUM 5.8EPSS 3.85%
Does this matter?
Lower severity and a low EPSS score (3.85%). Track it; it rarely justifies an emergency change on its own.
Description
Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL via unknown vectors, related to "a potential Clickjacking issue variant."
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:P
- EPSS
- 3.85% probability · 90th percentile
- CISA KEV
- Not listed
- Affected
- adobe/air · adobe/flash player · adobe/flash player for linux · adobe/flex
- Source
- cve@mitre.org
References
- http://isc.sans.org/diary.html?storyid=5929
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
- http://secunia.com/advisories/34226
- http://secunia.com/advisories/34293
- http://secunia.com/advisories/35074
- http://security.gentoo.org/glsa/glsa-200903-23.xml
- http://securitytracker.com/id?1021751
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1
- http://support.apple.com/kb/HT3549
- http://www.adobe.com/support/security/bulletins/apsb09-01.htmlPatch, Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2009/0513Patch
- http://www.vupen.com/english/advisories/2009/0743
- http://www.vupen.com/english/advisories/2009/1297
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48902
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16419
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6662
- http://isc.sans.org/diary.html?storyid=5929
- http://lists.apple.com/archives/security-announce/2009/May/msg00002.html
- http://secunia.com/advisories/34226
- http://secunia.com/advisories/34293
- http://secunia.com/advisories/35074
- http://security.gentoo.org/glsa/glsa-200903-23.xml
- http://securitytracker.com/id?1021751
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-254909-1
- http://support.apple.com/kb/HT3549
- http://www.adobe.com/support/security/bulletins/apsb09-01.htmlPatch, Vendor Advisory
- http://www.us-cert.gov/cas/techalerts/TA09-133A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2009/0513Patch
- http://www.vupen.com/english/advisories/2009/0743
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.