CVE-2007-6243

NGHIÊM TRỌNG 9.3CVE-2007-6243 · Công bố 20/12/2007 · cập nhật 16/06/2026

Tóm tắt nhanh

CVE-2007-6243 là lỗ hổng mức NGHIÊM TRỌNG (CVSS 9.3) ảnh hưởng flash player (adobe).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 8.5%, cao hơn 95.0% các lỗ hổng khác.
Chưa có phiên bản vá trong dữ liệu: theo dõi khuyến cáo của nhà cung cấp ở phần Tham khảo.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
flash player adobe	`≤ 9.0.48.0`	Chưa có bản vá

Mô tả

Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.

Tham khảo

jvn.jp/jp/JVN%2345675516/index.html
lists.apple.com/archives/security-announce/2008//May/msg00001.html
lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html
lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html
lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
secunia.com/advisories/28161
secunia.com/advisories/28213 · Vendor Advisory
secunia.com/advisories/28570
secunia.com/advisories/29763 · Vendor Advisory
secunia.com/advisories/29865 · Vendor Advisory
secunia.com/advisories/30430 · Vendor Advisory
secunia.com/advisories/30507 · Vendor Advisory
secunia.com/advisories/32448 · Vendor Advisory
secunia.com/advisories/32702 · Vendor Advisory
secunia.com/advisories/32759 · Vendor Advisory
secunia.com/advisories/33390 · Vendor Advisory
securitytracker.com/id
sunsolve.sun.com/search/document.do
sunsolve.sun.com/search/document.do
support.avaya.com/elmodocs2/security/ASA-2008-440.htm
support.avaya.com/elmodocs2/security/ASA-2009-020.htm
support.nortel.com/go/main.jsp
adobe.com/devnet/flashplayer/articles/fplayer9_security.html
adobe.com/support/security/bulletins/apsb07-20.html · Vendor Advisory
adobe.com/support/security/bulletins/apsb08-11.html
gentoo.org/security/en/glsa/glsa-200801-07.xml
gentoo.org/security/en/glsa/glsa-200804-21.xml
kb.cert.org/vuls/id/935737 · US Government Resource
redhat.com/support/errata/RHSA-2008-0221.html
redhat.com/support/errata/RHSA-2008-0945.html
redhat.com/support/errata/RHSA-2008-0980.html
securityfocus.com/bid/26929
securityfocus.com/bid/26966
us-cert.gov/cas/techalerts/TA07-355A.html · US Government Resource
us-cert.gov/cas/techalerts/TA08-100A.html · US Government Resource
us-cert.gov/cas/techalerts/TA08-150A.html · US Government Resource
vupen.com/english/advisories/2007/4258
vupen.com/english/advisories/2008/1697
vupen.com/english/advisories/2008/1724/references
exchange.xforce.ibmcloud.com/vulnerabilities/39129
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11069

Lỗ hổng khác của flash player

Xem tất cả →

Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.

Quét site miễn phí