Cross-Site Scripting Vulnerability in Adobe Flex SDK

CVE-2009-1879

Summary

This vulnerability allows remote attackers to exploit a cross-site scripting (XSS) flaw in the index.template.html of the Adobe Flex SDK express-install templates. If the installed Flash version is older than a specified major version, attackers can inject arbitrary web scripts or HTML through the query string, leading to potential unauthorized actions on behalf of users interacting with affected applications. This presents a significant security risk as it can allow attackers to manipulate web page content and execute malicious scripts in the context of the victim's browser.

References