Published: 04/01/2008 Updated: 29/09/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote malicious users to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect. NOTE: the asfunction: vector is already covered by CVE-2007-6244.1.

Vulnerable Product	Search on Vulmon	Subscribe to Product
adobe flash player 8.0.34.0
adobe flash player 8.0.35.0
adobe flash player 9.0.115.0
adobe flash player 9.0.31.0
adobe flash player 9.0.45.0
adobe flash player 7.0.70.0
adobe flash player 8.0
adobe flash player 9.0.28.0
adobe flash player 9.0.31
adobe flash player 7.0.25
adobe flash player 9.0.16
adobe flash player 9.0.18d60
adobe flash player 9.0.47.0
adobe flash player 9.0.48.0
adobe flash player 7.0.63
adobe flash player 7.0.69.0
adobe flash player 9.0.20.0
adobe flash player 9.0.28

Debian Bug report logs - #459071 CVE-2007-6637: Multiple cross-site scripting (XSS) vulnerabilities Package: flashplugin-nonfree; Maintainer for flashplugin-nonfree is Bart Martens <bartm@debianorg>; Source for flashplugin-nonfree is src:flashplugin-nonfree (PTS, buildd, popcon) Reported by: Steffen Joeris <steffenjoeri ...

CWE-79 http://www.adobe.com/support/security/advisories/apsa07-06.html http://www.securityfocus.com/bid/27034 http://securitytracker.com/id?1019141 http://www.adobe.com/support/security/bulletins/apsb08-11.html http://www.redhat.com/support/errata/RHSA-2008-0221.html http://www.us-cert.gov/cas/techalerts/TA08-100A.html http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html http://secunia.com/advisories/29763 http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml http://secunia.com/advisories/29865 http://lists.apple.com/archives/security-announce/2008//May/msg00001.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 http://www.us-cert.gov/cas/techalerts/TA08-150A.html http://secunia.com/advisories/30430 http://secunia.com/advisories/30507 http://www.vupen.com/english/advisories/2008/1697 http://www.vupen.com/english/advisories/2008/1724/references https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9828 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=459071 https://nvd.nist.gov

CVE-2007-6637

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect