CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
86.6%
Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes), which are leaked to the Flash Player applet.
Vendor | Product | Version | CPE |
---|---|---|---|
adobe | flash_player | 7.0.25 | cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:* |
adobe | flash_player | 8.0 | cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:* |
adobe | flash_player | 9.0.18d60 | cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:* |
adobe | flash_player | 9.0.20 | cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:* |
adobe | flash_player | 9.0.28 | cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:* |
opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:* |
opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:beta2:*:*:*:*:*:* |
opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:beta3:*:*:*:*:*:* |
opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:beta4:*:*:*:*:*:* |
opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:beta5:*:*:*:*:*:* |
ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
secunia.com/advisories/24877
secunia.com/advisories/25027
secunia.com/advisories/25432
secunia.com/advisories/25662
secunia.com/advisories/25669
secunia.com/advisories/25894
secunia.com/advisories/25933
secunia.com/advisories/26027
secunia.com/advisories/26118
secunia.com/advisories/26357
secunia.com/advisories/26860
secunia.com/advisories/28068
sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1
sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1
www.adobe.com/support/security/advisories/apsa07-03.html
www.adobe.com/support/security/bulletins/apsb07-12.html
www.gentoo.org/security/en/glsa/glsa-200708-01.xml
www.mandriva.com/security/advisories?name=MDKSA-2007:138
www.novell.com/linux/security/advisories/2007_12_sr.html
www.novell.com/linux/security/advisories/2007_28_opera.html
www.novell.com/linux/security/advisories/2007_46_flashplayer.html
www.opera.com/support/search/view/858/
www.redhat.com/support/errata/RHSA-2007-0494.html
www.securityfocus.com/bid/23437
www.securitytracker.com/id?1017903
www.us-cert.gov/cas/techalerts/TA07-192A.html
www.vupen.com/english/advisories/2007/1361
www.vupen.com/english/advisories/2007/2497
www.vupen.com/english/advisories/2007/4190
exchange.xforce.ibmcloud.com/vulnerabilities/33595
issues.rpath.com/browse/RPL-1462
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9332