CVE-2008-4824
Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before...
CVE-2008-4824 is a high vulnerability (CVSS 9.3) in Adobe Flash Player, published November 17, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 21.1%, the 97th percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 21.1%EPSS, 97th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
flash-pluginRed Hat:rhel_extras:5::client From an advisory covering 14 CVEs | before 0:10.0.12.36-2.el5 | 0:10.0.12.36-2.el5 |
flash-pluginRed Hat:rhel_extras:5::server From an advisory covering 14 CVEs | before 0:10.0.12.36-2.el5 | 0:10.0.12.36-2.el5 |
flash-pluginRed Hat:rhel_extras:3 From an advisory covering 14 CVEs | before 0:9.0.151.0-1.el3.with.oss | 0:9.0.151.0-1.el3.with.oss |
flash-pluginRed Hat:rhel_extras:4 From an advisory covering 14 CVEs | before 0:9.0.151.0-1.el4 | 0:9.0.151.0-1.el4 |
What each source reports
NVD Score used
Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."
- Record
CVE-2008-4824- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."
- Record
CVE-2008-4824- Updated
- 2026-11-02
EUVDEUVD-2008-4803No score
Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."
- Record
EUVD-2008-4803- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3qjf-w8wq-4wwhNo score
Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before...
Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."
- Record
GHSA-3qjf-w8wq-4wwh- Weakness
- CWE-20
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=
securityfocus.com/archive/1/498561/100/0/threaded
secunia.com/advisories/33390
isecpartners.com/advisories/2008-01-flash.txt
support.avaya.com/elmodocs2/security/ASA-2009-020.htm
vupen.com/english/advisories/2008/3444
Show 80 moreShow less
us-cert.gov/cas/techalerts/TA08-350A.html
security.gentoo.org/glsa/glsa-200903-23.xml
support.apple.com/kb/HT3338
osvdb.org/49958
redhat.com/support/errata/RHSA-2008-0980.html
lists.apple.com/archives/security-announce//2008//Dec/msg00000.html
sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1
adobe.com/support/security/bulletins/apsb08-22.html
nvd.nist.gov/vuln/detail/CVE-2008-4824
github.com/advisories/GHSA-3qjf-w8wq-4wwh
access.redhat.com/errata/RHSA-2008:0945
labs.adobe.com/technologies/flashplayer10
bugzilla.redhat.com/show_bug.cgi?id=252292
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0945.json
cve.org/CVERecord?id=CVE-2007-4324