CVE-2007-6243 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2007-6243
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-6243

Description: Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/39129 SUSE http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 ST 1019116 SAID Secunia Advisory: SA29865 Secunia Advisory: SA29763 Secunia Advisory: SA28570 Secunia Advisory: SA28213 Secunia Advisory: SA28161 Secunia Advisory: SA30430 Secunia Advisory: SA30507 Secunia Advisory: SA32448 Secunia Advisory: SA32759 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0945.html http://www.redhat.com/support/errata/RHSA-2008-0221.html MISC http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html JVN http://jvn.jp/jp/JVN%2345675516/index.html GENTOO http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml CONFIRM http://www.adobe.com/support/security/bulletins/apsb08-11.html http://www.adobe.com/support/security/bulletins/apsb07-20.html CERT-VN 935737 CERT http://www.us-cert.gov/cas/techalerts/TA08-100A.html http://www.us-cert.gov/cas/techalerts/TA08-150A.html http://www.us-cert.gov/cas/techalerts/TA07-355A.html BID 26966 26929 APPLE http://lists.apple.com/archives/security-announce/2008//May/msg00001.html

Return to the previous page.