{"uuid": "3ffc241f-087c-47cf-bb5a-0dcc6fd2e441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-5499", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/browser/adobe_flashplayer_aslaunch.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"0a29406d9794e4f9b30b3c5d6702c708\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in Adobe Flash Player for Linux,\\n          version 10.0.12.36 and 9.0.151.0 and prior.\\n          An input validation vulnerability allows command execution when the browser\\n          loads a SWF file which contains shell metacharacters in the arguments to\\n          the ActionScript launch method.\\n\\n          The victim must have Adobe AIR installed for the exploit to work. This module\\n          was tested against version 10.0.12.36 (10r12_36).\", \"disclosure_date\": \"2008-12-17\", \"fullname\": \"exploit/linux/browser/adobe_flashplayer_aslaunch\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 15:07:08 +0000\", \"name\": \"Adobe Flash Player ActionScript Launch Command Execution Vulnerability\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/exploits/linux/browser/adobe_flashplayer_aslaunch.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"linux/browser/adobe_flashplayer_aslaunch\", \"references\": [\"CVE-2008-5499\", \"OSVDB-50796\", \"BID-32896\", \"URL-http://www.adobe.com/support/security/bulletins/apsb08-24.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:19.816387Z"}