← Database

CVE-2008-3872

CRITICAL CVSS: 9.3 Published: 2008-10-06 Modified: 2026-06-16

Description

Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations.

Affected Platforms

Adobe Flash Player

Weakness Type

CWE-264

References