Most recent entries from all

certa-2007-avi-553 — De multiples vulnérabilités affectent différentes versions du lecteur Adobe Flash Player. Elles permettent à un utilisa…

certa-2007-avi-553

EUVD-2026-138019

fkie_cve-2007-6243

Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.

GHSA-5jf8-m2pq-674g

gsd-2007-6243

jvndb-2007-000817

Adobe Flash Player contains a vulnerability caused by improper handling of cross-domain policy files. Adobe Flash Player is a player for the Flash media format and enables frame-based animations with sound to be viewed within a web browser. According to Adobe's "About allowing cross-domain data loading", "When a Flash document attempts to access data from another domain, Flash Player automatically attempts to load a policy file from that domain. If the domain of the Flash document that is attempting to access the data is included in the policy file, the data is automatically accessible." Flash Player contains a vulnerability that may allow a specially crafted web page to be interpreted as a cross-domain policy file because the plugin fails to properly handle cross-domain policy files.

RHSA-2007:1126 — Red Hat Security Advisory: flash-plugin security update

Flash movie can determine whether a TCP port is open : pcre before 7.3 incorrect unicode in char class optimization Flash plugin DNS rebinding flash: abitrary code execution Flash Player cross-domain and cross-site scripting flaws flash: XSS via asfunction protocol flash: HTTP headers modification flash: privilege escalation