Description
The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= ↗
- http://secunia.com/advisories/33390 ↗
- http://www.adobe.com/support/security/bulletins/apsb08-18.html ↗
- http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm ↗
- http://secunia.com/advisories/32702 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44584 ↗
- http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html ↗
- http://blogs.adobe.com/psirt/2008/08/clipboard_attack.html ↗
- http://secunia.com/advisories/34226 ↗
- http://www.vupen.com/english/advisories/2008/2838 ↗
- http://blogs.zdnet.com/security/?p=1733 ↗
- http://security.gentoo.org/glsa/glsa-200903-23.xml ↗
- http://securitytracker.com/id?1020724 ↗
- http://secunia.com/advisories/32759 ↗
- http://www.redhat.com/support/errata/RHSA-2008-0945.html ↗
- http://www.redhat.com/support/errata/RHSA-2008-0980.html ↗
- http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm ↗
- http://www.securityfocus.com/bid/31117 ↗
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 ↗
- http://secunia.com/advisories/32448 ↗
- http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html ↗
- http://blogs.zdnet.com/security/?p=1759 ↗