--- title: CVE-2008-4401 description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2008-4401 --- # CVE-2008-4401 Publication date 17 October 2008 Last updated 24 July 2024 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description ActionScript in Adobe Flash Player 9.0.124.0 and earlier does not require user interaction in conjunction with (1) the FileReference.browse operation in the FileReference upload API or (2) the FileReference.download operation in the FileReference download API, which allows remote attackers to create a browse dialog box, and possibly have unspecified other impact, via an SWF file. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | flashplugin-nonfree | 9.10 karmic | Not affected | | 9.04 jaunty | Not affected | | 8.10 intrepid | Not affected | | 8.04 LTS hardy | Fixed 9.0.246.0ubuntu1 | | 7.10 gutsy | Ignored end of life, was needed | | 6.06 LTS dapper | Ignored end of life | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4401) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2008-4401) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2008-4401) * [Debian](https://security-tracker.debian.org/tracker/CVE-2008-4401) ### Other references *