CVEs / CVE-2008-4824
CVE-2008-4824: n/a n/a vulnerability
- high 9.3 CVSS 2.0 (NVD)
- EPSS 21.1% chance of exploitation in the next 30 days, higher than 97% of CVEs (2 Nov 2026)
- Last changed at its sources
Are you affected? Check your servers with Stackurity: it lists the software on each server and the vulnerabilities to fix first.
Check your servers with Stackurity Already using Stackurity? Search for CVE-2008-4824
Description
Multiple unspecified vulnerabilities in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0 allow remote attackers to execute arbitrary code via unknown vectors related to "input validation errors."
Affected and fixed versions
| Product | Affected | Fixed in |
|---|---|---|
| n/a n/a | n/a | — |
Exploitation
Not in the CISA Known Exploited Vulnerabilities catalog as of 30 Oct 2026.
Severity
| CVSS 2.0 | 9.3 highAV:N/AC:M/Au:N/C:C/I:C/A:CScored by NVD |
|---|---|
| Weakness | CWE-20 |
References
- CVE-2008-4824 on NVD
- http://lists.apple.com/archives/security-announce//2008//Dec/msg00000.html Mailing List, Third Party Advisory
- http://osvdb.org/49958 Broken Link
- http://secunia.com/advisories/32702 Third Party Advisory
- http://secunia.com/advisories/32772 Third Party Advisory
- http://secunia.com/advisories/33179 Third Party Advisory
- http://secunia.com/advisories/33390 Third Party Advisory
- http://secunia.com/advisories/34226 Third Party Advisory
- http://security.gentoo.org/glsa/glsa-200903-23.xml Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 Broken Link
- http://support.apple.com/kb/HT3338 Third Party Advisory
- http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm Third Party Advisory
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid= Broken Link
- http://www.adobe.com/support/security/bulletins/apsb08-22.html Patch, Vendor Advisory
- http://www.isecpartners.com/advisories/2008-01-flash.txt Third Party Advisory
- http://www.redhat.com/support/errata/RHSA-2008-0980.html Third Party Advisory
- http://www.securityfocus.com/archive/1/498561/100/0/threaded Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA08-350A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2008/3189 Third Party Advisory
- http://www.vupen.com/english/advisories/2008/3444 Third Party Advisory
Sources
Exploitation status from the CISA Known Exploited Vulnerabilities catalog. EPSS scores from FIRST. Descriptions, severity and references from the National Vulnerability Database. Open-source package versions from OSV (CC-BY 4.0). Text is shown as each source states it; Stackurity does not edit it. Check the vendor's advisory before acting.
This product uses data from the NVD API but is not endorsed or certified by the NVD.