CVE-2009-0521

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-02-26 · updated 2026-06-16
Weakness: CWE-200

Description

Untrusted search path vulnerability in Adobe Flash Player 9.x before 9.0.159.0 and 10.x before 10.0.22.87 on Linux allows local users to obtain sensitive information or gain privileges via a crafted library in a directory contained in the RPATH.

Affected products

Adobe Flash Player For Linux: through 10.0.15.3; 10.0.12.36

References

http://isc.sans.org/diary.html?storyid=5929
http://rhn.redhat.com/errata/RHSA-2009-0332.html
http://secunia.com/advisories/34012
http://secunia.com/advisories/34226
http://security.gentoo.org/glsa/glsa-200903-23.xml
http://www.adobe.com/support/security/bulletins/apsb09-01.html
http://www.vupen.com/english/advisories/2009/0513
https://bugzilla.redhat.com/show_bug.cgi?id=487144
https://exchange.xforce.ibmcloud.com/vulnerabilities/48904
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6160
http://isc.sans.org/diary.html?storyid=5929
http://rhn.redhat.com/errata/RHSA-2009-0332.html

Get alerted when CVE-2009-0521 or the next vulnerability affects your stack