[Forgot Password]
Login  Register Subscribe

24128

 
 

131615

 
 

111749

 
 

909

 
 

87255

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2007-6243Date: (C)2007-12-19   (M)2018-07-10


Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECTRACK-1019116
SUNALERT-238305
SUNALERT-248586
BID-26929
BID-26966
SECUNIA-28161
SECUNIA-28213
SECUNIA-28570
SECUNIA-29763
SECUNIA-29865
SECUNIA-30430
SECUNIA-30507
SECUNIA-32448
SECUNIA-32702
SECUNIA-32759
SECUNIA-33390
ADV-2007-4258
ADV-2008-1697
ADV-2008-1724
APPLE-SA-2008-05-28
GLSA-200801-07
GLSA-200804-21
JVN#45675516
RHSA-2008:0221
RHSA-2008:0945
RHSA-2008:0980
SUSE-SA:2007:069
SUSE-SA:2008:022
SUSE-SR:2008:025
TA07-355A
TA08-100A
TA08-150A
VU#935737
adobe-unspecified-security-bypass(39129)
http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm
http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm
http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=
http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html
http://www.adobe.com/support/security/bulletins/apsb07-20.html
http://www.adobe.com/support/security/bulletins/apsb08-11.html

CPE    1
cpe:/a:adobe:flash_player:9.0.48.0
CWE    1
CWE-264
OVAL    12
oval:org.secpod.oval:def:9819
oval:org.secpod.oval:def:9816
oval:org.secpod.oval:def:9818
oval:org.secpod.oval:def:9817
...

© SecPod Technologies