CVE-2007-6243
- State
- Published
- Severity
- Not scored
- Published
- Dec 20, 2007
- Updated
- Aug 7, 2024
- Reserved
- Dec 5, 2007
Description
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=
- SUSE-SA:2007:069vendor-advisory
- 29865third-party-advisory
- 33390third-party-advisory
- 30507third-party-advisory
- 28570third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb08-11.html
- oval:org.mitre.oval:def:11069vdb-entrysignature
- http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm
- 32702third-party-advisory
- ADV-2008-1724vdb-entry
- TA07-355Athird-party-advisory
- GLSA-200801-07vendor-advisory
- RHSA-2008:0221vendor-advisory
- TA08-150Athird-party-advisory
- JVN#45675516third-party-advisory
- VU#935737third-party-advisory
- http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html
- 30430third-party-advisory
- APPLE-SA-2008-05-28vendor-advisory
- SUSE-SA:2008:022vendor-advisory
- 26929vdb-entry
- 28161third-party-advisory
- 32759third-party-advisory
- 29763third-party-advisory
- RHSA-2008:0945vendor-advisory
- 238305vendor-advisory
- RHSA-2008:0980vendor-advisory
- ADV-2007-4258vdb-entry
- http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm
- 1019116vdb-entry
- 26966vdb-entry
- GLSA-200804-21vendor-advisory
- ADV-2008-1697vdb-entry
- 248586vendor-advisory
- 32448third-party-advisory
- adobe-unspecified-security-bypass(39129)vdb-entry
- TA08-100Athird-party-advisory
- SUSE-SR:2008:025vendor-advisory
- 28213third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb07-20.html
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.