CVE-2008-4546

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL…

published October 14, 2008

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
66%
Percentile
99.3
In the wild
Unconfirmed
What it is

Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL pointer dereference and browser crash) by returning a different response when an HTTP request is sent a second time, as demonstrated by two responses that provide SWF files with different SWF version numbers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.65868 · 99.3th percentile
Published
2008-10-14T15:00Z
EPSS history
Timeline
  • 01 OCT 03:05Z
    EPSS moved 17% → 66%
    epss
  • 30 SEP 03:03Z
    EPSS moved 17% → 66%
    epss
  • 14 OCT 15:00Z
    Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows remote web servers to cause a denial of service (NULL…
    cvelistv5