CVEvulnerability
CVE-2007-2022
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-04-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-200
Description
Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes), which are leaked to the Flash Player applet.
Affected configurations
• adobe flash player 7.0.25
• adobe flash player 8.0
• adobe flash player 9.0.18d60
• adobe flash player 9.0.20
• adobe flash player 9.0.28
• opera opera browser 5.0
• opera opera browser 5.02
• opera opera browser 5.10
• opera opera browser 5.11
• opera opera browser 5.12
• opera opera browser 6.0
• opera opera browser 6.1
• opera opera browser 6.01
• opera opera browser 6.02
• opera opera browser 6.03
• opera opera browser 6.04
• opera opera browser 6.05
• opera opera browser 6.06
• opera opera browser 6.11
• opera opera browser 6.12
• opera opera browser 7.0
• opera opera browser 7.01
• opera opera browser 7.02
• opera opera browser 7.03
• opera opera browser 7.10
• opera opera browser 7.11
• opera opera browser 7.20
• opera opera browser 7.21
• opera opera browser 7.22
• opera opera browser 7.23
• opera opera browser 7.50
• opera opera browser 7.51
• opera opera browser 7.52
• opera opera browser 7.53
• opera opera browser 7.54
• opera opera browser 7.60
• opera opera browser 8.0
• opera opera browser 8.01
• opera opera browser 8.02
• opera opera browser 8.50
• opera opera browser 8.51
• opera opera browser 8.52
• opera opera browser 8.53
• opera opera browser 8.54
• opera opera browser 9.0
• opera opera browser 9.01
• opera opera browser 9.02
• opera opera browser 9.10
• opera opera browser 9.12
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc patches.sgi.com
- http://secunia.com/advisories/24877 Vendor Advisory
- http://secunia.com/advisories/25027 Vendor Advisory
- http://secunia.com/advisories/25432 Vendor Advisory
- http://secunia.com/advisories/25662 Vendor Advisory
- http://secunia.com/advisories/25669 Vendor Advisory
- http://secunia.com/advisories/25894 Vendor Advisory
- http://secunia.com/advisories/25933 Vendor Advisory
- http://secunia.com/advisories/26027 Vendor Advisory
- http://secunia.com/advisories/26118 Vendor Advisory
- http://secunia.com/advisories/26357 Vendor Advisory
- http://secunia.com/advisories/26860 Vendor Advisory
- http://secunia.com/advisories/28068 Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1 sunsolve.sun.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1 sunsolve.sun.com
- http://www.adobe.com/support/security/advisories/apsa07-03.html www.adobe.com
- http://www.adobe.com/support/security/bulletins/apsb07-12.html Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:138 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2007_12_sr.html www.novell.com
- http://www.novell.com/linux/security/advisories/2007_28_opera.html www.novell.com
- http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html www.novell.com
- http://www.opera.com/support/search/view/858/ www.opera.com
- http://www.redhat.com/support/errata/RHSA-2007-0494.html www.redhat.com
- http://www.securityfocus.com/bid/23437 www.securityfocus.com
- http://www.securitytracker.com/id?1017903 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-192A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/1361 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/2497 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/4190 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33595 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-1462 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9332 oval.cisecurity.org
- ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc patches.sgi.com
- http://secunia.com/advisories/24877 Vendor Advisory
- http://secunia.com/advisories/25027 Vendor Advisory
- http://secunia.com/advisories/25432 Vendor Advisory
- http://secunia.com/advisories/25662 Vendor Advisory
- http://secunia.com/advisories/25669 Vendor Advisory
- http://secunia.com/advisories/25894 Vendor Advisory
- http://secunia.com/advisories/25933 Vendor Advisory
- http://secunia.com/advisories/26027 Vendor Advisory
- http://secunia.com/advisories/26118 Vendor Advisory
- http://secunia.com/advisories/26357 Vendor Advisory
- http://secunia.com/advisories/26860 Vendor Advisory
- http://secunia.com/advisories/28068 Vendor Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1 sunsolve.sun.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1 sunsolve.sun.com
- http://www.adobe.com/support/security/advisories/apsa07-03.html www.adobe.com
- http://www.adobe.com/support/security/bulletins/apsb07-12.html Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:138 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2007_12_sr.html www.novell.com
- http://www.novell.com/linux/security/advisories/2007_28_opera.html www.novell.com
- http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html www.novell.com
- http://www.opera.com/support/search/view/858/ www.opera.com
- http://www.redhat.com/support/errata/RHSA-2007-0494.html www.redhat.com
- http://www.securityfocus.com/bid/23437 www.securityfocus.com
- http://www.securitytracker.com/id?1017903 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-192A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/1361 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/2497 Vendor Advisory
- http://www.vupen.com/english/advisories/2007/4190 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33595 exchange.xforce.ibmcloud.com
- https://issues.rpath.com/browse/RPL-1462 issues.rpath.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9332 oval.cisecurity.org