FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2007-6245

This CVE name corresponds to:

Entered Topic
2008-01-03 linux-flashplugin -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

Details

Type Candidate
Name CVE-2007-6245
Phase Assigned(20071205)

Description

Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTTP headers for client requests and conduct HTTP Request Splitting attacks.

References

Source Reference
CONFIRM http://www.adobe.com/support/security/bulletins/apsb07-20.html
GENTOO GLSA-200801-07
REDHAT RHSA-2007:1126
SUNALERT 238305
SUSE SUSE-SA:2007:069
CERT TA07-355A
BID 26929
BID 26969
OVAL oval:org.mitre.oval:def:9546
VUPEN ADV-2007-4258
VUPEN ADV-2008-1724
SECTRACK 1019116
SECUNIA 28157
SECUNIA 28161
SECUNIA 28570
SECUNIA 28213
SECUNIA 30507
XF adobe-unspecified-response-splitting(39134)