CVE-2009-0521

Published: Feb 26, 2009Modified: Apr 23, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH.

Affected (2)

Products: Adobe: Flash Player For Linux

Adobe

1 product

Flash Player For Linux

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Adobe Flash Player For Linux	Up to 10.0.15.3
Adobe Flash Player For Linux	Version 10.0.12.36

Running on/with	Platform Versions
Linux Linux Kernel	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (20)

http://isc.sans.org/diary.html?storyid=5929

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2009-0332.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/34012

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/34226

Source: cve@mitre.org

Broken Link

http://security.gentoo.org/glsa/glsa-200903-23.xml

Source: cve@mitre.org

Third Party Advisory

http://www.adobe.com/support/security/bulletins/apsb09-01.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.vupen.com/english/advisories/2009/0513

Source: cve@mitre.org

Broken LinkPatchVendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=487144

Source: cve@mitre.org

Issue TrackingThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/48904

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6160

Source: cve@mitre.org

Third Party Advisory

http://isc.sans.org/diary.html?storyid=5929