CVE-2008-5363
The MITRE CVE dictionary describes this issue as:
The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not validate character elements during retrieval from the dictionary data structure, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PDF file.
Find out more about CVE-2008-5363 from the MITRE CVE dictionary dictionary and NIST NVD.
CVSS v2 metrics
| Base Score | 4.3 |
|---|---|
| Base Metrics | AV:N/AC:M/Au:N/C:N/I:N/A:P |
| Access Vector | Network |
| Access Complexity | Medium |
| Authentication | None |
| Confidentiality Impact | None |
| Integrity Impact | None |
| Availability Impact | Partial |
Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).
Red Hat Security Errata
| Platform | Errata | Release Date |
|---|---|---|
| Red Hat Enterprise Linux AS version 4 Extras (flash-plugin) | RHSA-2008:0980 | 2008-11-12 |
| Red Hat Enterprise Linux AS version 3 Extras (flash-plugin) | RHSA-2008:0980 | 2008-11-12 |
| Red Hat Enterprise Linux Supplementary 5 (flash-plugin) | RHSA-2008:0945 | 2008-10-28 |
CVE description copyright © 2017, The MITRE Corporation