CVE		CVE-2008-4823
Status		Candidate
Description		Cross-site scripting (XSS) vulnerability in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to inject arbitrary web script or HTML via vectors related to loose interpretation of an ActionScript attribute.
Phase		Assigned (31.10.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-4823
References		APPLE : APPLE-SA-2008-12-15
		BID : 32129
		CERT : TA08-350A
		CONFIRM : http://support.apple.com/kb/HT3338
		CONFIRM : http://support.avaya.com/elmodocs2/security/ASA-20...
		CONFIRM : http://support.avaya.com/elmodocs2/security/ASA-20...
		CONFIRM : http://support.nortel.com/go/main.jsp?cscat=BLTNDE...
		CONFIRM : http://www.adobe.com/support/security/bulletins/ap...
		GENTOO : GLSA-200903-23
		REDHAT : RHSA-2008:0980
		SECTRACK : 1021151
		SECUNIA : 32702
		SECUNIA : 33179
		SECUNIA : 33390
		SECUNIA : 34226
		SUNALERT : 248586
		VUPEN : ADV-2008-3444
SecurityVulns:		Apple Mac OS X multiple security vulnerabilities