CVE-2007-2022: adobe flash_player
CVSS: 6.8v2.0MediumModified
AliasesRHSA-2007:0494
Published 13-04-2007Last modified 07-08-2024
Some data may be incomplete
- 1 reference with an unsupported link type was hidden.
Vulnerability summary
CVE-2007-2022 is a medium (CVSS 6.8) vulnerability in adobe flash_player. EPSS estimates a 4.33% chance of exploitation in the next 30 days, higher than 91% of scored vulnerabilities.
CVSS score
6.8/10
010
Medium · v2.0 (NVD)EPSS score
4.33%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 13-04-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes), which are leaked to the Flash Player applet.
CVSS metrics
1 score · 1 source · 1 versionMedium 6.8Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
4.33%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.33% on 19-09-2026
19-09-202619-10-2026
EPSS score4.33%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Redhat3 products
- kdebase< 6:3.1.3-5.16 | < 6:3.3.1-5.19.rhel4 | < 6:3.5.4-13.6.el5
- kdebase-debuginfo< 6:3.1.3-5.16 | < 6:3.3.1-5.19.rhel4 | < 6:3.5.4-13.6.el5
- kdebase-devel< 6:3.1.3-5.16 | < 6:3.3.1-5.19.rhel4 | < 6:3.5.4-13.6.el5
Adobe1 product
- flash_player7.0.25 | 8.0 | 9.0.18d60 | 9.0.20 | 9.0.28
Opera1 product
- opera_browser5.0 | 5.0:beta2 | 5.0:beta3 | 5.0:beta4 | 5.0:beta5 | 5.0:beta6 | 5.0:beta7 | 5.0:beta8 | 5.02 | 5.10 | 5.11 | 5.12 | 6.0 | 6.0:beta1 | 6.0:beta2 | 6.0:tp1 | 6.0:tp2 | 6.0:tp3 | 6.1 | 6.01 | 6.1:beta1 | 6.02 | 6.03 | 6.04 | 6.05 | 6.06 | 6.11 | 6.12 | 7.0 | 7.0:beta1 | 7.0:beta1_v2 | 7.0:beta2 | 7.01 | 7.02 | 7.03 | 7.10 | 7.10:beta1 | 7.11 | 7.11:beta2 | 7.20 | 7.20:beta7 | 7.21 | 7.22 | 7.23 | 7.50 | 7.50:beta1 | 7.51 | 7.52 | 7.53 | 7.54 | 7.54:update1 | 7.54:update2 | 7.60 | 8.0 | 8.0:beta1 | 8.0:beta2 | 8.0:beta3 | 8.01 | 8.02 | 8.50 | 8.51 | 8.52 | 8.53 | 8.54 | 9.0 | 9.0:beta1 | 9.0:beta2 | 9.01 | 9.02 | 9.10 | 9.12
3 vendors · 5 products
References
39 linksShow all 39 references
- issues.rpath.com/browse/RPL-1462X Refsource CONFIRM
- www.us-cert.gov/cas/techalerts/TA07-192A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9332VDB EntrySignatureX Refsource OVAL
- www.opera.com/support/search/view/858/X Refsource CONFIRM