CVE-2007-5275
- State
- Published
- Severity
- Not scored
- Published
- Oct 8, 2007
- Updated
- Aug 7, 2024
- Reserved
- Oct 8, 2007
Description
The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML document, and the availability of a Flash Socket class that does not use the browser's DNS pins, aka DNS rebinding attacks, a different issue than CVE-2002-1467 and CVE-2007-4324.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- SUSE-SA:2007:069vendor-advisory
- 29865third-party-advisory
- 28157third-party-advisory
- 30507third-party-advisory
- http://crypto.stanford.edu/dns/dns-rebinding.pdf
- 28570third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb08-11.html
- ADV-2008-1724vdb-entry
- TA07-355Athird-party-advisory
- oval:org.mitre.oval:def:9250vdb-entrysignature
- GLSA-200801-07vendor-advisory
- RHSA-2008:0221vendor-advisory
- TA08-150Athird-party-advisory
- 30430third-party-advisory
- APPLE-SA-2008-05-28vendor-advisory
- SUSE-SA:2008:022vendor-advisory
- 28161third-party-advisory
- RHSA-2007:1126vendor-advisory
- 29763third-party-advisory
- 238305vendor-advisory
- 26930vdb-entry
- ADV-2007-4258vdb-entry
- 1019116vdb-entry
- GLSA-200804-21vendor-advisory
- ADV-2008-1697vdb-entry
- TA08-100Athird-party-advisory
- 28213third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb07-20.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.