Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
CVE-2009-0522
CVE information
Published
Last Modified
CVSSv2.0 Severity
Impact Analysis
Description
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user into visiting an arbitrary URL via an unspecified manipulation of the "mouse pointer display," related to a "Clickjacking attack.".
CVSSv2.0 Score
- Severity
- Medium
- Base Score
- 4.3/10
- Exploit Score
- 8.6/10
- Access Vector
- Network
- Access Complexity
- Medium
- Authentication Required
- None
- Impact Score
- 2.9/10
- Confidentiality Impact
- None
- Availability Impact
- None
- Integrity Impact
- Partial
Products Affected
CPE | Affected | Vulnerable | Excluding | Edit |
---|---|---|---|---|
cpe:2.3:a:adobe:air:1.5:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:7.0.63:*:linux:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:8.0:*:basic:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:8.0:*:pro:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:cs3:*:pro:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player:cs4:*:pro:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flash_player_for_linux:*:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:a:adobe:flex:3.0:*:*:*:*:*:*:* |
Yes
|
- | ||
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* |
No
|
- |
References
- http://secunia.com/advisories/34012
- http://www.adobe.com/support/security/bulletins/apsb09-01.html
- http://www.vupen.com/english/advisories/2009/0513
- http://isc.sans.org/diary.html?storyid=5929
- http://securitytracker.com/id?1021752
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48903
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6