PT-2007-3366 · Adobe+1 · Macromedia Flash Player+1

Published 2007-04-13 · Updated 2017-10-11 · CVE-2007-2022

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Adobe Macromedia Flash Player versions 7 and 9

Description The issue allows remote attackers to obtain sensitive information, specifically browser keystrokes, which are leaked to the Flash Player applet when used with certain browsers.

Recommendations For Adobe Macromedia Flash Player version 7, update the browser to a version that is not affected by this issue, such as Opera 9.20 or later, or use an alternative browser. For Adobe Macromedia Flash Player version 9, update the browser to a version that is not affected by this issue, such as Opera 9.20 or later, or use an alternative browser.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2007-2022

RHSA-2007:0494

RHSA-2007_0494

Affected Products

Macromedia Flash Player

Red Hat

References · 37

• http://secunia.com/advisories/25894 · Vendor Advisory
• http://secunia.com/advisories/25027 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0494.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_12_sr.html · Vendor Advisory
• http://secunia.com/advisories/24877 · Vendor Advisory
• http://secunia.com/advisories/25669 · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_28_opera.html · Vendor Advisory
• http://secunia.com/advisories/25662 · Vendor Advisory
• http://vupen.com/english/advisories/2007/4190 · Vendor Advisory
• ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc · Vendor Advisory
• http://secunia.com/advisories/25432 · Vendor Advisory
• http://secunia.com/advisories/26118 · Vendor Advisory
• http://vupen.com/english/advisories/2007/2497 · Vendor Advisory
• http://secunia.com/advisories/26357 · Vendor Advisory
• http://secunia.com/advisories/28068 · Vendor Advisory