[Forgot Password]
Login  Register Subscribe

24002

 
 

127027

 
 

102010

 
 

909

 
 

81374

 
 

133

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2007-6243Date: (C)2007-12-19   (M)2018-02-19


Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score  : CVSS Score  : 9.3
Exploit Score: Exploit Score: 8.6
Impact Score : Impact Score : 10.0
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: Access Vector: NETWORK
Attack Complexity: Access Complexity: MEDIUM
Privileges Required: Authentication: NONE
User Interaction: Confidentiality: COMPLETE
Scope: Integrity: COMPLETE
Confidentiality: Availability: COMPLETE
Integrity:  
Availability:  
  





Reference:
SECTRACK-1019116
SUNALERT-238305
SUNALERT-248586
BID-26929
BID-26966
SECUNIA-28161
SECUNIA-28213
SECUNIA-28570
SECUNIA-29763
SECUNIA-29865
SECUNIA-30430
SECUNIA-30507
SECUNIA-32448
SECUNIA-32702
SECUNIA-32759
SECUNIA-33390
ADV-2007-4258
ADV-2008-1697
ADV-2008-1724
APPLE-SA-2008-05-28
GLSA-200801-07
GLSA-200804-21
JVN#45675516
RHSA-2008:0221
RHSA-2008:0945
RHSA-2008:0980
SUSE-SA:2007:069
SUSE-SA:2008:022
SUSE-SR:2008:025
TA07-355A
TA08-100A
TA08-150A
VU#935737
adobe-unspecified-security-bypass(39129)
http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm
http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=
http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html
http://www.adobe.com/support/security/bulletins/apsb07-20.html
http://www.adobe.com/support/security/bulletins/apsb08-11.html

CPE    1
cpe:/a:adobe:flash_player:9.0.48.0
CWE    1
CWE-264
OVAL    12
oval:org.secpod.oval:def:9343
oval:org.secpod.oval:def:9792
oval:org.secpod.oval:def:9793
oval:org.secpod.oval:def:9816
...

© 2013 SecPod Technologies