Unscored severity · published Jul 31, 2009
CVE-2009-1870
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a "local sandbox vulnerability."
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AI
Air · Adobe
through 1.5.1; 1.0; 1.01; 1.1; 1.5 · source: NVD
FP
Flash Player · Adobe
through 10.0.22.87; 7.0; 7.0.1; 7.0.25; 7.0.63; 7.0.63; +28 more · source: NVD
FL
Flex · Adobe
3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1870
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1870
lists.apple.com
http://lists.apple.com/archives/security-announce/2009/Sep/msg00003.html
lists.apple.com
http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html
osvdb.org
http://osvdb.org/56778
secunia.com
http://secunia.com/advisories/36193
secunia.com
http://secunia.com/advisories/36374
secunia.com
http://secunia.com/advisories/36701
More from Air
8.8
CVE-2016-1010
Adobe Flash Player and AIR Integer Overflow Vulnerability
8.8
CVE-2015-8651
Adobe Flash Player Integer Overflow Vulnerability
8.8
CVE-2014-8439
Adobe Flash Player Dereferenced Pointer Vulnerability
8.8
CVE-2014-0502
Adobe Flash Player Double Free Vulnerablity
8.8
CVE-2011-0611
Adobe Flash Player Remote Code Execution Vulnerability