CVE-2008-4546

Description

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two responses that provide SWF files with different SWF version numbers.

Risk Information

Base Score

6.5

MODERATE

Vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

35.513

Associated Vulnerability

Vulnerability	OS Platform
Upgrade Adobe flash player 10.0.12.10 to latest version	Windows
Vulnerabilities CVE-2008-4546,CVE-2008-4824,CVE-2008-5361,CVE-2008-5362,CVE-2008-5363 are affected in Adobe Flash Player Plugin 10.0.12.10	Windows
Vulnerabilities CVE-2008-4546,CVE-2008-4824,CVE-2008-5361,CVE-2008-5362,CVE-2008-5363 are affected in Adobe Flash Player PPAPI 10.0.12.10	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234