CVE-2008-4820
Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and...
Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.
Exploit likelihood
What each source reports
NVD Score used
7.1
Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.
- Record
CVE-2008-4820- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:C/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.
- Record
CVE-2008-4820- Updated
- 2026-11-02
EUVDEUVD-2008-4799 No score
Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.
- Record
EUVD-2008-4799- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-43v9-5jqv-2894 No score
Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and...
Unspecified vulnerability in the Flash Player ActiveX control in Adobe Flash Player 9.0.124.0 and earlier on Windows allows attackers to obtain sensitive information via unknown vectors.
- Record
GHSA-43v9-5jqv-2894- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4820 is a high vulnerability (CVSS 7.1) in Adobe Flash Player, published November 10, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.41%, the 93rd percentile. No source names a fixed version.
References
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=
securityfocus.com/bid/32129
secunia.com/advisories/33390
support.avaya.com/elmodocs2/security/ASA-2009-020.htm
vupen.com/english/advisories/2008/3444
us-cert.gov/cas/techalerts/TA08-350A.html
Show 9 moreShow less
adobe.com/support/security/bulletins/apsb08-20.html
secunia.com/advisories/33179
exchange.xforce.ibmcloud.com/vulnerabilities/46533
securitytracker.com/id?1021148
support.apple.com/kb/HT3338
lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1
nvd.nist.gov/vuln/detail/CVE-2008-4820
github.com/advisories/GHSA-43v9-5jqv-2894