CVEvulnerability
CVE-2007-6245
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-119
Description
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTTP headers for client requests and conduct HTTP Request Splitting attacks.
Affected configurations
• adobe flash player 7.0
• adobe flash player 8.0
• adobe flash player 9.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html lists.opensuse.org
- http://secunia.com/advisories/28157 secunia.com
- http://secunia.com/advisories/28161 secunia.com
- http://secunia.com/advisories/28213 secunia.com
- http://secunia.com/advisories/28570 secunia.com
- http://secunia.com/advisories/30507 secunia.com
- http://securitytracker.com/id?1019116 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 sunsolve.sun.com
- http://www.adobe.com/support/security/bulletins/apsb07-20.html www.adobe.com
- http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml www.gentoo.org
- http://www.redhat.com/support/errata/RHSA-2007-1126.html www.redhat.com
- http://www.securityfocus.com/bid/26929 www.securityfocus.com
- http://www.securityfocus.com/bid/26969 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA07-355A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/4258 www.vupen.com
- http://www.vupen.com/english/advisories/2008/1724/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39134 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9546 oval.cisecurity.org
- http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html lists.opensuse.org
- http://secunia.com/advisories/28157 secunia.com
- http://secunia.com/advisories/28161 secunia.com
- http://secunia.com/advisories/28213 secunia.com
- http://secunia.com/advisories/28570 secunia.com
- http://secunia.com/advisories/30507 secunia.com
- http://securitytracker.com/id?1019116 securitytracker.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 sunsolve.sun.com
- http://www.adobe.com/support/security/bulletins/apsb07-20.html www.adobe.com
- http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml www.gentoo.org
- http://www.redhat.com/support/errata/RHSA-2007-1126.html www.redhat.com
- http://www.securityfocus.com/bid/26929 www.securityfocus.com
- http://www.securityfocus.com/bid/26969 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA07-355A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/4258 www.vupen.com
- http://www.vupen.com/english/advisories/2008/1724/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39134 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9546 oval.cisecurity.org