Lucene search
Ubuntu.comUB:CVE-2007-6243HistoryDec 20, 2007 - 12:00 a.m.
CVE-2007-6243
2007-12-2000:00:00
ubuntu.com
ubuntu.com
10
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.052 Low
EPSS
Percentile
93.0%
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to
7.0.70.0 does not sufficiently restrict the interpretation and usage of
cross-domain policy files, which makes it easier for remote attackers to
conduct cross-domain and cross-site scripting (XSS) attacks.
Bugs
Related
jvn
jvn
JVN#45675516 Flash Player vulnerable in handling cross-domain policy files
2007-12-20 00:00:00
prion
prion
Cross site scripting
2007-12-20 01:46:00
cve
cve
CVE-2007-6243
2007-12-20 01:46:00
nvd
nvd
CVE-2007-6243
2007-12-20 01:46:00
cert
cert
Adobe Flash Player may load arbitrary, malformed cross-domain policy files
2008-03-25 00:00:00
cvelist
cvelist
CVE-2007-6243
2007-12-20 01:00:00
openvas
openvas
FreeBSD Ports: linux-flashplugin
2008-11-01 00:00:00
Adobe Flash Player Multiple Security Bypass Vulnerabilities (Linux)
2008-10-16 00:00:00
Adobe Flash Player Multiple Security Bypass Vulnerabilities - Windows
2008-10-16 00:00:00
nessus
nessus
FreeBSD : linux-flashplugin -- multiple vulnerabilities (78f456fd-9c87-11dd-a55e-00163e000016)
2008-10-20 00:00:00
openSUSE 10 Security Update : flash-player (flash-player-5747)
2008-11-12 00:00:00
openSUSE Security Update : flash-player (flash-player-294)
2009-07-21 00:00:00
freebsd
freebsd
linux-flashplugin -- multiple vulnerabilities
2008-10-15 00:00:00
linux-flashplugin -- multiple vulnerabilities
2007-12-18 00:00:00
securityvulns
securityvulns
Adobe Flash Player multiple security vulnerabilities
2008-04-14 00:00:00
suse
suse
remote code execution in flash-player
2008-04-11 13:28:58
remote code execution in flash-player
2007-12-21 16:24:32
seebug
seebug
Adobe Flash Player 9.0.124.0版本修改多个安全漏洞
2008-04-11 00:00:00
gentoo
gentoo
Adobe Flash Player: Multiple vulnerabilities
2008-04-18 00:00:00
Adobe Flash Player: Multiple vulnerabilities
2008-01-20 00:00:00
redhat
redhat
(RHSA-2007:1126) Critical: flash-plugin security update
2007-12-18 00:00:00
(RHSA-2008:0221) Critical: flash-plugin security update
2008-04-08 00:00:00
(RHSA-2008:0945) Critical: flash-plugin security update
2008-10-28 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.052 Low
EPSS
Percentile
93.0%
Related for UB:CVE-2007-6243