Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2008-5361 Details

Description

The ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9.0.151.0, and Adobe AIR before 1.5, does not verify a member element's size when performing (1) DefineConstantPool, (2) ActionJump, (3) ActionPush, (4) ActionTry, and unspecified other actions, which allows remote attackers to read sensitive data from process memory via a crafted PDF file.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://secunia.com/advisories/33390 CVEThird Party Advisory
http://secunia.com/advisories/34226 CVEThird Party Advisory
http://security.gentoo.org/glsa/glsa-200903-23.xml CVEThird Party Advisory
http://securityreason.com/securityalert/4692 CVEThird Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1 CVEBroken Link

see all 18 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-399Resource Management Errors[email protected]

Affected Products

ProductVersions
adobe air
< 1.5

CPE

  • cpe:2.3:a:adobe:air:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
adobe flash player
>= 9.0.16.0, < 9.0.151.0
>= 10, < 10.0.12.36

CPE

  • cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2008-5361
NVD Published Date:
Dec 8, 2008
NVD Last Modified:
Jun 16, 2026
Source:
[email protected]
CVE-2008-5361 Details - Not Deferred