CVE-2007-6243
Fixed in a distro release EPSS 8%
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.
Products: adobe flash_player
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat rhel extras 3 | flash-plugin | 0:9.0.115.0-1.el3.with.oss |
| Red Hat rhel extras 3 | flash-plugin | 0:9.0.124.0-1.el3.with.oss |
| Red Hat rhel extras 3 | flash-plugin | 0:9.0.151.0-1.el3.with.oss |
| Red Hat rhel extras 4 | flash-plugin | 0:9.0.115.0-1.el4 |
| Red Hat rhel extras 4 | flash-plugin | 0:9.0.124.0-1.el4 |
| Red Hat rhel extras 4 | flash-plugin | 0:9.0.151.0-1.el4 |
| Red Hat rhel extras 5 | flash-plugin | 0:9.0.115.0-1.el5 |
| Red Hat rhel extras 5 | flash-plugin | 0:9.0.124.0-1.el5 |
| Red Hat rhel extras 5 | flash-plugin | 0:10.0.12.36-2.el5 |