CVE-2008-5499

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 79%

from disclosure to weapon1219 days

Published on NVDDec 18

1st PoC+1219d

metasploitDec 17

exploitation probability

79%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Unspecified vulnerability in Adobe Flash Player for Linux 10.0.12.36, and 9.0.151.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/18761unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://lists.opensuse.org/opensuse-security-announce/2008-12/msg00006.html http://osvdb.org/50796 http://secunia.com/advisories/33221 http://secunia.com/advisories/33267 http://secunia.com/advisories/33294 http://secunia.com/advisories/34226 http://security.gentoo.org/glsa/glsa-200903-23.xml https://exchange.xforce.ibmcloud.com/vulnerabilities/47445 http://www.adobe.com/support/security/bulletins/apsb08-24.html http://www.redhat.com/support/errata/RHSA-2008-1047.html http://www.securityfocus.com/bid/32896 http://www.securitytracker.com/id?1021458