[Forgot Password]
Login  Register Subscribe

24128

 
 

131615

 
 

111666

 
 

909

 
 

87321

 
 

136

Paid content will be excluded from the download.


Download | Alert*
OVAL

Multiple cross site scripting vulnerabilities in Adobe Flash Player via crafted SWF file (Mac OS X)

ID: oval:org.secpod.oval:def:9365Date: (C)2013-02-26   (M)2018-07-10
Class: VULNERABILITYFamily: macos




The host is installed with Adobe Flash Player 9.x through 9.0.115.0 or 8.x through 8.0.39.0 or Adobe Air before 1.0.1 and is prone to multiple cross site scripting vulnerabilities. The flaws are present in the applications, which fail to handle crafted SWF file. Successful exploitation could allow remote attackers to inject arbitrary web script or HTML.

Platform:
Apple Mac OS X 10.8
Apple Mac OS X 10.9
Apple Mac OS X 10.10
Apple Mac OS X 10.11
Apple Mac OS X 10.12
Apple Mac OS X Server 10.8
Apple Mac OS X Server 10.9
Apple Mac OS X Server 10.10
Apple Mac OS X Server 10.11
Apple Mac OS X Server 10.12
Product:
Adobe Air
Adobe Flash Player
Reference:
CVE-2007-6637
CVE    1
CVE-2007-6637
CPE    20
cpe:/a:adobe:air
cpe:/a:adobe:flash_player:9.0.31.0
cpe:/a:adobe:flash_player
cpe:/a:adobe:flash_player:9.0.115.0
...

© SecPod Technologies