Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-3951

Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player before 10.0.42.34 and Adobe AIR before 1.5.3 on Windows allows remote attackers to obtain the names of local files via unknown vectors. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-4820.

Published

2009-12-10T19:30:00.627

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.1 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System microsoft windows * No
Application adobe adobe_air ≤ 1.5.2 Yes
Application adobe adobe_air 1.0 Yes
Application adobe adobe_air 1.0.1 Yes
Application adobe adobe_air 1.1 Yes
Application adobe adobe_air 1.5.1 Yes
Application adobe flash_player ≤ 10.0.32.18 Yes
Application adobe flash_player 7.0 Yes
Application adobe flash_player 7.0.1 Yes
Application adobe flash_player 7.0.25 Yes
Application adobe flash_player 7.0.63 Yes
Application adobe flash_player 7.0.69.0 Yes
Application adobe flash_player 7.0.70.0 Yes
Application adobe flash_player 7.1 Yes
Application adobe flash_player 7.1.1 Yes
Application adobe flash_player 7.2 Yes
Application adobe flash_player 8 Yes
Application adobe flash_player 8 Yes
Application adobe flash_player 8.0 Yes
Application adobe flash_player 8.0 Yes
Application adobe flash_player 8.0 Yes
Application adobe flash_player 8.0.24.0 Yes
Application adobe flash_player 8.0.34.0 Yes
Application adobe flash_player 8.0.35.0 Yes
Application adobe flash_player 8.0.39.0 Yes
Application adobe flash_player 9.0 Yes
Application adobe flash_player 9.0.16 Yes
Application adobe flash_player 9.0.18d60 Yes
Application adobe flash_player 9.0.20 Yes
Application adobe flash_player 9.0.20.0 Yes
Application adobe flash_player 9.0.28 Yes
Application adobe flash_player 9.0.28.0 Yes
Application adobe flash_player 9.0.31 Yes
Application adobe flash_player 9.0.31.0 Yes
Application adobe flash_player 9.0.45.0 Yes
Application adobe flash_player 9.0.47.0 Yes
Application adobe flash_player 9.0.48.0 Yes
Application adobe flash_player 9.0.112.0 Yes
Application adobe flash_player 9.0.114.0 Yes
Application adobe flash_player 9.0.115.0 Yes
Application adobe flash_player 9.0.124.0 Yes
Application adobe flash_player 9.0.155.0 Yes
Application adobe flash_player 9.0.159.0 Yes
Application adobe flash_player 9.125.0 Yes
Application adobe flash_player 10.0.0.584 Yes
Application adobe flash_player 10.0.12.10 Yes
Application adobe flash_player 10.0.12.36 Yes
Application adobe flash_player 10.0.22.87 Yes
References