JVN#72595280 Flash Player allows to send arbitrary Referer headers

Adobe Flash Player is a multimedia and application browser plugin for viewing Adobe Flash contents.
Flash Player contains a vulnerability allowing to send arbitrary Referer headers.

Impact

As a flash file (swf) can send an arbitrary Referer header and Flash Player cannot properly validate Referer header sent by swf, a remote attacker could bypass a security measure on a web application applied based on the Referer header.

Solution

Update the Software
Update to the latest version provided by the vendor.

For more information, refer to the vendor’s website.

Products Affected

• Flash Player 8.0.34.0 and earlier
  For more information, refer to the vendor’s website.