Red Hat Security AdvisoryRHSA-2007:1126
flash-plugin security update
Released 2007-12-18 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 Extras flash-plugin-9.0.115.0-1.el3.with.oss.i386
- Red Hat Desktop version 4 Extras flash-plugin-9.0.115.0-1.el4.i386
- Red Hat Enterprise Linux AS version 3 Extras flash-plugin-9.0.115.0-1.el3.with.oss.i386
- Red Hat Enterprise Linux AS version 4 Extras flash-plugin-9.0.115.0-1.el4.i386
- Red Hat Enterprise Linux Desktop Supplementary (v. 5) flash-plugin-9.0.115.0-1.el5.i386
- Red Hat Enterprise Linux ES version 3 Extras flash-plugin-9.0.115.0-1.el3.with.oss.i386
- Red Hat Enterprise Linux ES version 4 Extras flash-plugin-9.0.115.0-1.el4.i386
- Red Hat Enterprise Linux Server Supplementary (v. 5) flash-plugin-9.0.115.0-1.el5.i386
- Red Hat Enterprise Linux WS version 3 Extras flash-plugin-9.0.115.0-1.el3.with.oss.i386
- Red Hat Enterprise Linux WS version 4 Extras flash-plugin-9.0.115.0-1.el4.i386
Fixes 8 records
Priority MEDIUM 54
Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors, related to "input validation errors."
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.30065 · Published 2007-12-20 · Fixed CWE-20
Priority MEDIUM 51
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to co…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08467 · Published 2007-12-20 · Fixed CWE-264
Priority LOW 37
Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute arbitrary code via a singleton Unicode sequence in a character class in a regex pat…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04097 · Published 2007-11-07 · Fixed CWE-119
Priority LOW 34
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running on Linux, uses insecure permissions for memory, which might allow local users to gain privileges.
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.118 · Published 2007-12-20 · Fixed CWE-264
Priority LOW 34
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTTP headers for client requests and conduct HTTP Request Splitting attacks.
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.04705 · Published 2007-12-20 · Fixed CWE-119
Priority LOW 34
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 allow remote attackers to inject arbitrary web script or HTML via (1) a SWF file that uses the asfunctio…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.12931 · Published 2007-12-20 · Fixed CWE-79
Priority LOW 34
ActionScript 3 (AS3) in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allows remote attackers to bypass the Security Sandbox Model, obtain sensitive information, and port scan…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.07933 · Published 2007-08-14 · Fixed CWE-264
Priority LOW 32
The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP addre…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06153 · Published 2007-10-08 · Fixed CWE-20
THREATIST.IORead the docs