CVE-2008-1655

Published: Apr 9, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.

Affected (3)

Products: Adobe: Air, Flash Player, Flex

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Adobe Air	Version 1.0
Adobe Flash Player	Up to 9.0.115.0
Adobe Flex	Version 3.0

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (40)

http://lists.apple.com/archives/security-announce/2008//May/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html

Source: cve@mitre.org

http://secunia.com/advisories/29763

Source: cve@mitre.org

http://secunia.com/advisories/29865

Source: cve@mitre.org

http://secunia.com/advisories/30430

Source: cve@mitre.org

http://secunia.com/advisories/30507

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1

Source: cve@mitre.org

http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html#goal_dns

Source: cve@mitre.org

http://www.adobe.com/support/security/bulletins/apsb08-11.html

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml

Source: cve@mitre.org

http://www.osvdb.org/44283

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0221.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/28697

Source: cve@mitre.org

http://www.securitytracker.com/id?1019808

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA08-100A.html

Source: cve@mitre.org

US Government Resource

http://www.us-cert.gov/cas/techalerts/TA08-150A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2008/1697

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1724/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/41807

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10724

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008//May/msg00001.html