CVE-2008-4503

Description (CNA)

The Settings Manager in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to cause victims to unknowingly click on a link or dialog via access control dialogs disguised as normal graphical elements, as demonstrated by hijacking the camera or microphone, and related to "clickjacking."

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://blog.guya.net/2008/10/07/malicious-camera-spying-using-clickjacking/
• http://secunia.com/advisories/33390
• http://www.adobe.com/support/security/bulletins/apsb08-18.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45721
• http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm
• http://secunia.com/advisories/32702
• http://secunia.com/advisories/34226
• http://www.securitytracker.com/id?1020996
• http://security.gentoo.org/glsa/glsa-200903-23.xml
• http://www.adobe.com/support/security/advisories/apsa08-08.html
• http://secunia.com/advisories/32759
• http://www.redhat.com/support/errata/RHSA-2008-0945.html
• http://www.redhat.com/support/errata/RHSA-2008-0980.html
• http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm
• http://secunia.com/advisories/32163
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1
• http://secunia.com/advisories/32448
• http://www.vupen.com/english/advisories/2008/2764
• http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
• http://ha.ckers.org/blog/20081007/clickjacking-details/
• http://www.securityfocus.com/bid/31625

ADP enrichment