Adobe AIR Unspecified JavaScript Code Execution Vulnerability

Bugtraq ID:	32334
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Nov 17 2008 12:00AM
Updated:	Jul 06 2016 02:18PM
Credit:	Chris Weber of Casaba Security
Vulnerable:	Adobe AIR 1.1 Adobe AIR 1.01 Adobe AIR 1.0
Not Vulnerable:	Adobe AIR 1.5

Adobe AIR Unspecified JavaScript Code Execution Vulnerability

Adobe AIR is prone to a security vulnerability that allows attackers to execute arbitrary JavaScript code with elevated privileges in the context of the application.

In addition, since Adobe AIR employs Flash Player, the application is prone to the same recent security vulnerabilities announced for that product. For details, please see the following BIDs:

BID 31117 'Adobe Flash Player Clipboard Security Weakness'
BID 32129 'Adobe Flash Player Multiple Security Vulnerabilities'

Versions prior to Adobe AIR 1.5 are vulnerable.

Adobe AIR Unspecified JavaScript Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Adobe AIR Unspecified JavaScript Code Execution Vulnerability

Solution:
The vendor has released an advisory and updates. Please see the references for more information.

Adobe AIR Unspecified JavaScript Code Execution Vulnerability

References:

• APSB08-23 AIR update available to address security vulnerabilities (Adobe)