NetSight
IP …
critical9.3

CVE-2008-3872

Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF f…

Impact

Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations.

Affected products

VendorProductAffected versions
AdobeFlash Player
from 8.0 through 8.0.39.0
from 9.0 through 9.0.115.0

Weakness classification

CWE-264

References