CVE-2008-1655
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier,...
CVE-2008-1655 is a medium vulnerability (CVSS 4.3) in Adobe Flash Player, published April 9, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.90%, the 92nd percentile. Fixed in flash-plugin 0:9.0.124.0-1.el3.with.oss.
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
4.3
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
- Record
CVE-2008-1655- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
- Record
CVE-2008-1655- Updated
- 2026-11-02
EUVDEUVD-2008-1656 No score
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
- Record
EUVD-2008-1656- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6443-g69m-2px6 No score
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier,...
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
- Record
GHSA-6443-g69m-2px6- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-pluginRed Hat:rhel_extras:3 |
before 0:9.0.124.0-1.el3.with.oss | 0:9.0.124.0-1.el3.with.oss |
flash-pluginRed Hat:rhel_extras:4 |
before 0:9.0.124.0-1.el4 | 0:9.0.124.0-1.el4 |
flash-pluginRed Hat:rhel_extras:5::client |
before 0:9.0.124.0-1.el5 | 0:9.0.124.0-1.el5 |
flash-pluginRed Hat:rhel_extras:5::server |
before 0:9.0.124.0-1.el5 | 0:9.0.124.0-1.el5 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
secunia.com/advisories/29865
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10724
securitytracker.com/id?1019808
secunia.com/advisories/30507
exchange.xforce.ibmcloud.com/vulnerabilities/41807
securityfocus.com/bid/28697
Show 50 moreShow less
adobe.com/support/security/bulletins/apsb08-11.html
vupen.com/english/advisories/2008/1724/references
redhat.com/support/errata/RHSA-2008-0221.html
us-cert.gov/cas/techalerts/TA08-150A.html
secunia.com/advisories/30430
lists.apple.com/archives/security-announce/2008//May/msg00001.html
lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html
secunia.com/advisories/29763
sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1
gentoo.org/security/en/glsa/glsa-200804-21.xml
osvdb.org/44283
vupen.com/english/advisories/2008/1697
us-cert.gov/cas/techalerts/TA08-100A.html
adobe.com/devnet/flashplayer/articles/fplayer9_security.html
nvd.nist.gov/vuln/detail/CVE-2008-1655
github.com/advisories/GHSA-6443-g69m-2px6
access.redhat.com/errata/RHSA-2008:0221
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=367501
bugzilla.redhat.com/show_bug.cgi?id=440664
bugzilla.redhat.com/show_bug.cgi?id=440666
bugzilla.redhat.com/show_bug.cgi?id=440683
bugzilla.redhat.com/show_bug.cgi?id=440684
bugzilla.redhat.com/show_bug.cgi?id=440696
bugzilla.redhat.com/show_bug.cgi?id=440698
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0221.json
access.redhat.com/security/cve/CVE-2007-0071
cve.org/CVERecord?id=CVE-2007-0071
nvd.nist.gov/vuln/detail/CVE-2007-0071
access.redhat.com/security/cve/CVE-2007-5275
cve.org/CVERecord?id=CVE-2007-5275
nvd.nist.gov/vuln/detail/CVE-2007-5275
access.redhat.com/security/cve/CVE-2007-6019
cve.org/CVERecord?id=CVE-2007-6019
nvd.nist.gov/vuln/detail/CVE-2007-6019
access.redhat.com/security/cve/CVE-2007-6243
cve.org/CVERecord?id=CVE-2007-6243
nvd.nist.gov/vuln/detail/CVE-2007-6243
access.redhat.com/security/cve/CVE-2007-6637
cve.org/CVERecord?id=CVE-2007-6637
nvd.nist.gov/vuln/detail/CVE-2007-6637
access.redhat.com/security/cve/CVE-2008-1654
cve.org/CVERecord?id=CVE-2008-1654
nvd.nist.gov/vuln/detail/CVE-2008-1654
access.redhat.com/security/cve/CVE-2008-1655
cve.org/CVERecord?id=CVE-2008-1655
access.redhat.com/security/cve/CVE-2008-3872
bugzilla.redhat.com/show_bug.cgi?id=1618334
cve.org/CVERecord?id=CVE-2008-3872
nvd.nist.gov/vuln/detail/CVE-2008-3872