CVEvulnerability

CVE-2008-3873

4.3 MEDIUM Published 2008-08-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-08-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P

Description

The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008.

Affected configurations

• adobe flash player

References