Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:flash_player:cs4:*:pro:*:*:*:*:*

part: a version: cs4 update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductFlash Player (0bb173a9-e280-57e2-8906-f4e606cfd426)
Editionpro
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0522 vulnerable 2026-06-08 04:51:09.851862 Details available
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Windows allows remote attackers to trick a user into visiting an arbitrary URL via an unspecified manipulation of the "mouse pointer display," related to a "Clickjacking attack."
Published: 2009-02-26T16:00:00.000Z
Updated: 2024-08-07T04:40:03.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0520 vulnerable 2026-06-08 04:51:09.842642 Details available
Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 does not properly remove references to destroyed objects during Shockwave Flash file processing, which allows remote attackers to execute arbitrary code via a crafted file, related to a "buffer overflow issue."
Published: 2009-02-26T16:00:00.000Z
Updated: 2024-08-07T04:40:03.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0519 vulnerable 2026-06-08 04:51:09.841188 Details available
Unspecified vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 allows remote attackers to cause a denial of service (browser crash) or possibly execute arbitrary code via a crafted Shockwave Flash (aka .swf) file.
Published: 2009-02-26T16:00:00.000Z
Updated: 2024-08-07T04:40:03.715Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0114 vulnerable 2026-06-08 04:51:07.707058 Details available
Unspecified vulnerability in the Settings Manager in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87, and possibly other versions, allows remote attackers to trick a user into visiting an arbitrary URL via unknown vectors, related to "a potential Clickjacking issue variant."
Published: 2009-02-26T16:00:00.000Z
Updated: 2024-08-07T04:24:17.673Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.