Login Request a demo
Unscored severity · published Feb 26, 2009
CVE-2009-0521
Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FP
Flash Player For Linux · Adobe
through 10.0.15.3; 10.0.12.36 · source: NVD
Affected product
FP
Flash Player For Linux
Adobe
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0521
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0521
Third Party Advisory
http://isc.sans.org/diary.html?storyid=5929
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2009-0332.html
Broken Link
http://secunia.com/advisories/34012
Broken Link
http://secunia.com/advisories/34226
Third Party Advisory
http://security.gentoo.org/glsa/glsa-200903-23.xml
Patch
http://www.adobe.com/support/security/bulletins/apsb09-01.html
More from Flash Player For Linux
9.8
CVE-2016-0959
Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google…
8.8
CVE-2016-7865
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable type confusion vulnerability
8.8
CVE-2016-7864
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability
8.8
CVE-2016-7863
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability
8.8
CVE-2016-7862
Adobe Flash Player versions 23.0.0.205 and earlier, 11.2.202.643 and earlier have an exploitable use-after-free vulnerability