PT-2007-3366 · Adobe+1 · Macromedia Flash Player+1

Publicado 2007-04-13 · Atualizado 2017-10-11 · CVE-2007-2022

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Macromedia Flash Player versions 7 and 9

Description The issue allows remote attackers to obtain sensitive information, specifically browser keystrokes, which are leaked to the Flash Player applet when used with certain browsers.

Recommendations For Adobe Macromedia Flash Player version 7, update the browser to a version that is not affected by this issue, such as Opera 9.20 or later, or use an alternative browser. For Adobe Macromedia Flash Player version 9, update the browser to a version that is not affected by this issue, such as Opera 9.20 or later, or use an alternative browser.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2007-2022

RHSA-2007:0494

RHSA-2007_0494

Produtos afetados

Macromedia Flash Player

Red Hat

Referências · 37

• http://secunia.com/advisories/25894 · Aviso do Fabricante
• http://secunia.com/advisories/25027 · Aviso do Fabricante
• http://adobe.com/support/security/advisories/apsa07-03.html · Nota
• http://redhat.com/support/errata/RHSA-2007-0494.html · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2007_12_sr.html · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9332 · Nota
• http://secunia.com/advisories/24877 · Aviso do Fabricante
• http://secunia.com/advisories/25669 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2007_28_opera.html · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33595 · Nota
• http://secunia.com/advisories/25662 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/4190 · Aviso do Fabricante
• http://securitytracker.com/id?1017903 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2022 · Nota
• ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc · Aviso do Fabricante