CVE-2007-6244

🗓️ 20 Dec 2007 01:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 82 Views🌐 WEB

CVE-2007-6244: Multiple XSS vulnerabilities in Adobe Flash Playe

Reporter	Title	Published	Views	Family All 32
Tenable Nessus	Flash Player < 9.0.115.0 / 7.0.73.0 APSB07-20 Multiple Vulnerabilities	19 Dec 200700:00	–	nessus
Tenable Nessus	Flash Player < 7.0.73.0 / 9.0.115.0 Multiple Vulnerabilities (APSB07-20)	19 Dec 200700:00	–	nessus
Tenable Nessus	FreeBSD : linux-flashplugin -- multiple vulnerabilities (562cf6c4-b9f1-11dc-a302-000102cc8983)	4 Jan 200800:00	–	nessus
Tenable Nessus	GLSA-200801-07 : Adobe Flash Player: Multiple vulnerabilities	21 Jan 200800:00	–	nessus
Tenable Nessus	RHEL 3 / 4 / 5 : flash-plugin (RHSA-2007:1126)	24 Aug 200900:00	–	nessus
Tenable Nessus	openSUSE 10 Security Update : flash-player (flash-player-4855)	24 Dec 200700:00	–	nessus
Tenable Nessus	SuSE 10 Security Update : flash-player (ZYPP Patch Number 4856)	24 Dec 200700:00	–	nessus
FreeBSD	linux-flashplugin -- multiple vulnerabilities	18 Dec 200700:00	–	freebsd
Check Point Advisories	Adobe Flash Player ActiveX Control navigateToURL Cross-Site Scripting (CVE-2007-6244)	19 Jul 201000:00	–	checkpoint_advisories
Cvelist	CVE-2007-6244	20 Dec 200701:00	–	cvelist

NVD

Node

OR

adobe flash_playerMatch8.0

adobe flash_playerMatch9.0

Source	Link
secunia	www.secunia.com/advisories/28161
vupen	www.vupen.com/english/advisories/2007/4258
kb	www.kb.cert.org/vuls/id/758769
secunia	www.secunia.com/advisories/28213
sunsolve	www.sunsolve.sun.com/search/document.do
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/39131
lists	www.lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html
securitytracker	www.securitytracker.com/id
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10210
vupen	www.vupen.com/english/advisories/2008/1724/references

Parameter	Position	Path	Description	CWE
URL	path	crypto.stanford.edu/advisories/CVE-2007-6244/uxssdemo.as	Cross-site scripting via Adobe Flash Player navigateToURL usage that can execute in another frame context (XSS).	CWE-79
frame name	path	crypto.stanford.edu/advisories/CVE-2007-6244/uxssdemo.as	Cross-site scripting via Adobe Flash Player navigateToURL usage that can execute in another frame context (XSS).	CWE-79
navigateToURL	path	crypto.stanford.edu/advisories/CVE-2007-6244/uxssdemo.as	Cross-site scripting via Adobe Flash Player navigateToURL usage that can execute in another frame context (XSS).	CWE-79
asfunction protocol	path	crypto.stanford.edu/advisories/CVE-2007-6244/uxssdemo.as	Cross-site scripting via Adobe Flash Player navigateToURL usage that can execute in another frame context (XSS).	CWE-79
javascript: URI	path	crypto.stanford.edu/advisories/CVE-2007-6244/uxssdemo.as	Cross-site scripting via Adobe Flash Player navigateToURL usage that can execute in another frame context (XSS).	CWE-79

16 Jun 2026 22:47Current

5.5Medium risk

Vulners AI Score5.5

CVSS 24.3

EPSS0.12931

cve-2007-6244 cross-site scripting xss adobe flash player remote code injection nvd