PT-2009-6166

CVE-2009-3951

Publicado

2009-12-10

Atualizado

2018-10-30

Descrição por

CVSS 2.0

7.1

Alta

MétricasAV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Adobe Flash Player versions prior to 10.0.42.34 Adobe AIR versions prior to 1.5.3

Description The issue allows remote attackers to obtain the names of local files via unknown vectors. This is due to an incomplete fix for a previous issue.

Recommendations For Adobe Flash Player versions prior to 10.0.42.34, update to version 10.0.42.34 or later. For Adobe AIR versions prior to 1.5.3, update to version 1.5.3 or later.

Explorabilidade

Correção

Impactos

Pesquisadores

Bing Liu

Manuel Caballero

Will Dormann

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Identificadores relacionados