CVE-2008-1834

swfdec_load_object.c in Swfdec before 0.6.4 does not properly restrict local file access from untrusted sandboxes, which allows remote attackers to read arbitrary files via a crafted Flash file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 57%
VendorProductVersion
swfdecswfdec
𝑥
≤ 0.6.2
swfdecswfdec
0.4.0
swfdecswfdec
0.4.1
swfdecswfdec
0.4.2
swfdecswfdec
0.4.3
swfdecswfdec
0.4.4
swfdecswfdec
0.4.5
swfdecswfdec
0.5.0
swfdecswfdec
0.5.1
swfdecswfdec
0.5.2
swfdecswfdec
0.5.3
swfdecswfdec
0.5.4
swfdecswfdec
0.5.5
swfdecswfdec
0.5.90
swfdecswfdec
0.6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
swfdec0.5
oneiric
dne
natty
dne
maverick
dne
lucid
dne
karmic
dne
jaunty
dne
intrepid
dne
hardy
ignored
gutsy
ignored
feisty
dne
dapper
dne
swfdec0.6
oneiric
dne
natty
dne
maverick
dne
lucid
dne
karmic
not-affected
jaunty
not-affected
intrepid
not-affected
hardy
not-affected
gutsy
dne
feisty
dne
dapper
dne
Common Weakness Enumeration