CVE-2009-0521

Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.6 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
VendorProductVersion
adobeflash_player_for_linux
𝑥
≤ 10.0.15.3
adobeflash_player_for_linux
10.0.12.36
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
adobe-flashplugin
karmic
not-affected
jaunty
not-affected
intrepid
Fixed 10.0.22.87-2intrepid1
released
hardy
Fixed 10.0.22.87-2
released
gutsy
Fixed 10.0.22.87-0gutsy3
released
dapper
dne
flashplugin-nonfree
karmic
Fixed 10.0.22.87ubuntu1
released
jaunty
Fixed 10.0.22.87ubuntu1
released
intrepid
Fixed 10.0.22.87ubuntu1~intrepid1
released
hardy
Fixed 9.0.159.0ubuntu1~hardy1
released
gutsy
Fixed 9.0.159.0ubuntu1~gutsy1
released
dapper
ignored