CVE-2008-1654

Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF)…

published April 2, 2008

CVSS
—
EPSS
5%
Percentile
91.9
In the wild
Unconfirmed
What it is

Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF) style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated by changing the primary DNS server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04796 · 91.9th percentile
Published
2008-04-02T18:00Z
EPSS history
Timeline
  • 02 APR 18:00Z
    Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF)…
    cvelistv5