TI-2008-01587 Aliases CVE-2008-1655 GHSA-6443-g69m-2px6

Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and…

LOW 28CWE-79Published 2008-04-09 · Updated 2024-08-07

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Medium
Impact type: Cross-site scripting
Confidentiality · integrity · availability: None · Partial · None
Fix status: Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-79.

Summary

Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.

Why it matters now

EPSS 0.04903 92nd percentileScored 2026-11-07

Fix Fixed Red Hat: 1 advisory

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:adobe:air:1.0:::::::*	1.0	Vulnerable	Adobe
cpe:2.3:a:adobe:flash_player::::::::	up to 9.0.115.0	Vulnerable	Adobe
cpe:2.3:a:adobe:flex:3.0:::::::*	3.0	Vulnerable	Adobe

cpe:2.3:a:adobe:air:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Adobe
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* Versions up to 9.0.115.0 Vulnerable ·Adobe
cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Adobe

Remediation

Red Hat 1 advisory

RHSA-2008:0221 Released 2008-04-08 · Red Hat rating Critical
flash-plugin security update
- Red Hat Desktop version 3 Extras flash-plugin-9.0.124.0-1.el3.with.oss.i386
- Red Hat Desktop version 4 Extras flash-plugin-9.0.124.0-1.el4.i386
- Red Hat Enterprise Linux AS version 3 Extras flash-plugin-9.0.124.0-1.el3.with.oss.i386
- Red Hat Enterprise Linux AS version 4 Extras flash-plugin-9.0.124.0-1.el4.i386
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) flash-plugin-9.0.124.0-1.el5.i386
- Red Hat Enterprise Linux ES version 3 Extras flash-plugin-9.0.124.0-1.el3.with.oss.i386
- Red Hat Enterprise Linux ES version 4 Extras flash-plugin-9.0.124.0-1.el4.i386
- Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin-9.0.124.0-1.el5.i386
- Red Hat Enterprise Linux WS version 3 Extras flash-plugin-9.0.124.0-1.el3.with.oss.i386
- Red Hat Enterprise Linux WS version 4 Extras flash-plugin-9.0.124.0-1.el4.i386

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

Product	Status	Plan or fix
Red Hat Desktop version 3 Extras	Fixed	RHSA-2008:0221
Red Hat Desktop version 4 Extras	Fixed	RHSA-2008:0221
Red Hat Enterprise Linux AS version 3 Extras	Fixed	RHSA-2008:0221
Red Hat Enterprise Linux AS version 4 Extras	Fixed	RHSA-2008:0221
Red Hat Enterprise Linux Desktop Supplementary (v. 5)	Fixed	RHSA-2008:0221
Red Hat Enterprise Linux ES version 3 Extras	Fixed	RHSA-2008:0221
Red Hat Enterprise Linux ES version 4 Extras	Fixed	RHSA-2008:0221
Red Hat Enterprise Linux Server Supplementary (v. 5)	Fixed	RHSA-2008:0221
Red Hat Enterprise Linux WS version 3 Extras	Fixed	RHSA-2008:0221
Red Hat Enterprise Linux WS version 4 Extras	Fixed	RHSA-2008:0221

Timeline

2026-10-02 Threatist record created from CVE-2008-1655
2026-10-03 Alias added: GHSA-6443-g69m-2px6

References

Advisory 7

Other 6

TI-2016-00916 Integer overflow in Adobe Flash Player before 18.0.0.333 and 19.x through 21.x before… KEVCVSS 3.1HIGH 8.8
TI-2015-07113 Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before… KEVCVSS 3.1HIGH 8.8
TI-2014-06928 Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and… KEVCVSS 3.1HIGH 8.8
TI-2011-00532 Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac… KEVCVSS 3.1HIGH 7.8
TI-2010-01252 Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before… KEVCVSS 3.1HIGH 7.8
TI-2012-01807 Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS… KEVCVSS 3.1HIGH 7.5

See all 412 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences