Home

CVE-2008-4823

Description

Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute.

Risk Information

Base Score
6.1
MODERATE
Vector
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
17.674

Associated Vulnerability

VulnerabilityOS Platform
Upgrade Adobe flash player 9.0.48.0 to latest versionWindows
Multiple vulnerabilities affected in Adobe Flash Player Plugin 9.0.48.0Windows
Multiple vulnerabilities affected in Adobe Flash Player PPAPI 9.0.48.0Windows
Multiple Vulnerabilities are affected in Adobe Flash Player 11 ActiveX 9.0.124.0Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234