VULNERABILITY INTELLIGENCE

CVE-2008-3872

CVSS score9.3 HIGH

EPSS probability4.21%

CISA KEVNot currently listed

Published2008-10-06

Last modified2026-06-16

CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations.

Primary references

cve@mitre.org — Third Party Advisory
cve@mitre.org — Vendor Advisory
cve@mitre.org — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry