CVE-2008-4503

Published: Oct 9, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking."

Affected (23)

Products: Adobe: Flash Player

1 product

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
Adobe Flash Player	Up to 9.0.124.0
Adobe Flash Player	Version 7.0.1
Adobe Flash Player	Version 7.0.25
Adobe Flash Player	Version 7.0.63
Adobe Flash Player	Version 7.0.63
Adobe Flash Player	Version 7.0.69.0
Adobe Flash Player	Version 7.0.70.0
Adobe Flash Player	Version 7.0
Adobe Flash Player	Version 7.0_r67
Adobe Flash Player	Version 7.0_r67
Adobe Flash Player	Version 7.1.1
Adobe Flash Player	Version 7.1
Adobe Flash Player	Version 7.2
Adobe Flash Player	Version 8.0.24.0
Adobe Flash Player	Version 8.0.34.0
Adobe Flash Player	Version 8.0.35.0
Adobe Flash Player	Version 8.0.39.0
Adobe Flash Player	Version 8.0
Adobe Flash Player	Version 8
Adobe Flash Player	Version 8
Adobe Flash Player	Version 9.0.114.0
Adobe Flash Player	Version 9.0.115.0
Adobe Flash Player	Version 9.0

References (42)

http://blog.guya.net/2008/10/07/malicious-camera-spying-using-clickjacking/

Source: cve@mitre.org

http://ha.ckers.org/blog/20081007/clickjacking-details/

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html

Source: cve@mitre.org

http://secunia.com/advisories/32163

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32448

Source: cve@mitre.org

http://secunia.com/advisories/32702

Source: cve@mitre.org

http://secunia.com/advisories/32759

Source: cve@mitre.org

http://secunia.com/advisories/33390

Source: cve@mitre.org

http://secunia.com/advisories/34226

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200903-23.xml

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm

Source: cve@mitre.org

http://www.adobe.com/support/security/advisories/apsa08-08.html

Source: cve@mitre.org

Vendor Advisory

http://www.adobe.com/support/security/bulletins/apsb08-18.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2008-0945.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0980.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/31625

Source: cve@mitre.org

http://www.securitytracker.com/id?1020996

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2764

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/45721

Source: cve@mitre.org

http://blog.guya.net/2008/10/07/malicious-camera-spying-using-clickjacking/

Source: af854a3a-2127-422b-91ae-364da2661108

http://ha.ckers.org/blog/20081007/clickjacking-details/

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32163

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/32448

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32702

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32759

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33390

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34226

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200903-23.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.adobe.com/support/security/advisories/apsa08-08.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.adobe.com/support/security/bulletins/apsb08-18.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.redhat.com/support/errata/RHSA-2008-0945.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0980.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/31625

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1020996

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/2764

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/45721

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.