Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sen…

Exploit prediction (EPSS)

4.33% probability of exploitation in the next 30 days, higher than 91% of all scored CVEs.

CVSS scores

Classification

Weakness

• CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

• secunia.com /advisories/28068 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/33595 · vdb-entry, x_refsource_XF, x_transferred
• secunia.com /advisories/25894 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/26357 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• novell.com /linux/security/advisories/2007_46_flashplayer.html · vendor-advisory, x_refsource_SUSE, x_transferred
• secunia.com /advisories/26860 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• sunsolve.sun.com /search/document.do?assetkey=1-66-201506-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
• secunia.com /advisories/25669 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• vupen.com /english/advisories/2007/4190 · vdb-entry, x_refsource_VUPEN, x_transferred
• mandriva.com /security/advisories?name=MDKSA-2007:138 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• issues.rpath.com /browse/RPL-1462 · x_refsource_CONFIRM, x_transferred
• securityfocus.com /bid/23437 · vdb-entry, x_refsource_BID, x_transferred
• gentoo.org /security/en/glsa/glsa-200708-01.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• secunia.com /advisories/24877 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/26027 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• novell.com /linux/security/advisories/2007_12_sr.html · vendor-advisory, x_refsource_SUSE, x_transferred
• redhat.com /support/errata/RHSA-2007-0494.html · vendor-advisory, x_refsource_REDHAT, x_transferred
• us-cert.gov /cas/techalerts/TA07-192A.html · third-party-advisory, x_refsource_CERT, x_transferred
• oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9332 · vdb-entry, signature, x_refsource_OVAL, x_transferred
• vupen.com /english/advisories/2007/1361 · vdb-entry, x_refsource_VUPEN, x_transferred
• secunia.com /advisories/26118 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• adobe.com /support/security/advisories/apsa07-03.html · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/25027 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• novell.com /linux/security/advisories/2007_28_opera.html · vendor-advisory, x_refsource_SUSE, x_transferred
• opera.com /support/search/view/858/ · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/25933 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• vupen.com /english/advisories/2007/2497 · vdb-entry, x_refsource_VUPEN, x_transferred
• sunsolve.sun.com /search/document.do?assetkey=1-26-103167-1 · vendor-advisory, x_refsource_SUNALERT, x_transferred
• securitytracker.com /id?1017903 · vdb-entry, x_refsource_SECTRACK, x_transferred
• secunia.com /advisories/25662 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/25432 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• adobe.com /support/security/bulletins/apsb07-12.html · x_refsource_CONFIRM, x_transferred

Sources

• CVE List: CVE-2007-2022
• NVD: CVE-2007-2022

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.