Descrizioni CVE

Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.

Informazioni CVE

Vulnerabilità correlate

CWE-ID	Nome della vulnerabilità	Source
CWE-264	Category : Permissions, Privileges, and Access Controls Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Metriche

Metriche	Punteggio	Gravità	CVSS Vettore	Source
V2	9.3		AV:N/AC:M/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS è un modello di punteggio che prevede la probabilità che una vulnerabilità venga sfruttata.

Punteggio EPSS

Il modello EPSS produce un punteggio di probabilità compreso tra 0 e 1 (da 0 a 100%). Più alto è il punteggio, maggiore è la probabilità che una vulnerabilità venga sfruttata.

Percentile EPSS

Il percentile viene utilizzato per classificare le CVE in base al loro punteggio EPSS. Ad esempio, una CVE al 95° percentile secondo il suo punteggio EPSS ha una probabilità maggiore di essere sfruttata rispetto al 95% delle altre CVE. Il percentile consente quindi di confrontare il punteggio EPSS di una CVE con quello delle altre.

EPSS First.org

Products Mentioned

Configuraton 0

Adobe>>Flash_player >> Version To (including) 9.0.48.0

Riferimenti

http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=
Tags : x_refsource_CONFIRM

http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/29865
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/33390
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/30507
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/28570
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.adobe.com/support/security/bulletins/apsb08-11.html
Tags : x_refsource_CONFIRM

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11069
Tags : vdb-entry, signature, x_refsource_OVAL

http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm
Tags : x_refsource_CONFIRM

http://secunia.com/advisories/32702
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2008/1724/references
Tags : vdb-entry, x_refsource_VUPEN

http://www.us-cert.gov/cas/techalerts/TA07-355A.html
Tags : third-party-advisory, x_refsource_CERT

http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://www.redhat.com/support/errata/RHSA-2008-0221.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.us-cert.gov/cas/techalerts/TA08-150A.html
Tags : third-party-advisory, x_refsource_CERT

http://jvn.jp/jp/JVN%2345675516/index.html
Tags : third-party-advisory, x_refsource_JVN

http://www.kb.cert.org/vuls/id/935737
Tags : third-party-advisory, x_refsource_CERT-VN

http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html
Tags : x_refsource_MISC

http://secunia.com/advisories/30430
Tags : third-party-advisory, x_refsource_SECUNIA

http://lists.apple.com/archives/security-announce/2008//May/msg00001.html
Tags : vendor-advisory, x_refsource_APPLE

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html
Tags : vendor-advisory, x_refsource_SUSE

http://www.securityfocus.com/bid/26929
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/28161
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/32759
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/29763
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.redhat.com/support/errata/RHSA-2008-0945.html
Tags : vendor-advisory, x_refsource_REDHAT

http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://www.redhat.com/support/errata/RHSA-2008-0980.html
Tags : vendor-advisory, x_refsource_REDHAT

http://www.vupen.com/english/advisories/2007/4258
Tags : vdb-entry, x_refsource_VUPEN

http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm
Tags : x_refsource_CONFIRM

http://securitytracker.com/id?1019116
Tags : vdb-entry, x_refsource_SECTRACK

http://www.securityfocus.com/bid/26966
Tags : vdb-entry, x_refsource_BID

http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml
Tags : vendor-advisory, x_refsource_GENTOO

http://www.vupen.com/english/advisories/2008/1697
Tags : vdb-entry, x_refsource_VUPEN

http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1
Tags : vendor-advisory, x_refsource_SUNALERT

http://secunia.com/advisories/32448
Tags : third-party-advisory, x_refsource_SECUNIA

https://exchange.xforce.ibmcloud.com/vulnerabilities/39129
Tags : vdb-entry, x_refsource_XF

http://www.us-cert.gov/cas/techalerts/TA08-100A.html
Tags : third-party-advisory, x_refsource_CERT

http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html
Tags : vendor-advisory, x_refsource_SUSE

http://secunia.com/advisories/28213
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.adobe.com/support/security/bulletins/apsb07-20.html
Tags : x_refsource_CONFIRM

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	3.93%	–	–
2022-04-03	–	–	3.93%	–	–
2022-04-17	–	–	3.93%	–	–
2022-11-13	–	–	3.93%	–	–
2022-11-20	–	–	3.93%	–	–
2022-12-11	–	–	3.93%	–	–
2023-01-01	–	–	3.93%	–	–
2023-02-05	–	–	3.93%	–	–
2023-03-12	–	–	–	1.39%	–
2023-07-02	–	–	–	1.62%	–
2023-09-10	–	–	–	1.86%	–
2023-12-31	–	–	–	2.25%	–
2024-02-04	–	–	–	2.02%	–
2024-02-11	–	–	–	2.02%	–
2024-03-10	–	–	–	2.83%	–
2024-04-14	–	–	–	2.83%	–
2024-06-02	–	–	–	5.21%	–
2024-07-07	–	–	–	6.05%	–
2024-09-15	–	–	–	7.43%	–
2024-10-27	–	–	–	9.14%	–
2024-12-08	–	–	–	20.45%	–
2024-12-22	–	–	–	54.68%	–
2025-01-12	–	–	–	66.97%	–
2025-01-19	–	–	–	66.97%	–
2025-03-18	–	–	–	–	40.73%
2025-03-30	–	–	–	–	43.71%
2025-04-08	–	–	–	–	46.43%
2025-06-01	–	–	–	–	46.43%
2025-06-04	–	–	–	–	46.43%
2025-06-18	–	–	–	–	46.43%
2025-10-08	–	–	–	–	46.43%
2025-10-15	–	–	–	–	46.43%
2025-10-16	–	–	–	–	46.43%
2025-10-23	–	–	–	–	46.43%
2025-10-26	–	–	–	–	46.43%
2025-10-27	–	–	–	–	46.43%
2026-01-17	–	–	–	–	43.71%
2026-03-08	–	–	–	–	38.89%

Date	Percentile
2022-02-06	68%
2022-04-03	84%
2022-04-17	85%
2022-11-13	86%
2022-11-20	85%
2022-12-11	86%
2023-01-01	85%
2023-02-05	86%
2023-03-12	84%
2023-07-02	86%
2023-09-10	87%
2023-12-31	88%
2024-02-04	88%
2024-02-11	89%
2024-03-10	9%
2024-04-14	91%
2024-06-02	93%
2024-07-07	94%
2024-09-15	94%
2024-10-27	95%
2024-12-08	97%
2024-12-22	98%
2025-01-12	98%
2025-01-19	98%
2025-03-18	97%
2025-03-30	97%
2025-04-08	97%
2025-06-01	98%
2025-06-04	97%
2025-06-18	98%
2025-10-08	97%
2025-10-15	98%
2025-10-16	97%
2025-10-23	98%
2025-10-26	97%
2025-10-27	98%
2026-01-17	97%
2026-03-08	97%

CVE-2007-6243 : Dettaglio

CVE-2007-6243