{"schemaVersion":3,"id":"CVE-2007-4324","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"ActionScript 3 (AS3) in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allows remote attackers to bypass the Security Sandbox Model, obtain sensitive information, and port scan arbitrary hosts via a Flash (SWF) movie that specifies a connection to make, then uses timing discrepancies from the SecurityErrorEvent error to determine whether a port is open or not.  NOTE: 9.0.115.0 introduces support for a workaround, but does not fix the vulnerability.","dates":{"published":"2007-08-14T00:00:00.000Z","modified":"2024-08-07T14:53:55.445Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":5,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":5,"severity":"medium","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.07933,"percentile":0.94689,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.07933},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.07933,"percentile":0.94689}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.07933,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.07933,"percentile":0.94689}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-264","name":"Permissions, Privileges, and Access Controls","description":"Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.","type":"category","status":"Obsolete","abstraction":null,"likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/264.html"}],"affected":[{"vendor":"adobe","product":"flash_player","name":"Flash Player","label":"flash_player","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 9.0.114.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 9.0.114.0","eol":null,"hubHref":"/vendor/adobe/flash_player"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","label":"support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=","hostname":"support.nortel.com","tags":["X Refsource CONFIRM"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html","label":"lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://secunia.com/advisories/28157","label":"secunia.com/advisories/28157","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/33390","label":"secunia.com/advisories/33390","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://securityreason.com/securityalert/2995","label":"securityreason.com/securityalert/2995","hostname":"securityreason.com","tags":["Third Party Advisory","X Refsource SREASON"]},{"url":"http://secunia.com/advisories/30507","label":"secunia.com/advisories/30507","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11874","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11874","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb08-18.html","label":"www.adobe.com/support/security/bulletins/apsb08-18.html","hostname":"www.adobe.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/28570","label":"secunia.com/advisories/28570","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm","label":"support.avaya.com/elmodocs2/security/ASA-2009-020.htm","hostname":"support.avaya.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/32270","label":"secunia.com/advisories/32270","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/32702","label":"secunia.com/advisories/32702","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html","label":"www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html","hostname":"www.adobe.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.vupen.com/english/advisories/2008/1724/references","label":"www.vupen.com/english/advisories/2008/1724/references","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-355A.html","label":"www.us-cert.gov/cas/techalerts/TA07-355A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://www.securityfocus.com/archive/1/475961/100/0/threaded","label":"www.securityfocus.com/archive/1/475961/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml","label":"www.gentoo.org/security/en/glsa/glsa-200801-07.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO"]},{"url":"http://www.securityfocus.com/bid/25260","label":"www.securityfocus.com/bid/25260","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.vupen.com/english/advisories/2008/2838","label":"www.vupen.com/english/advisories/2008/2838","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://scan.flashsec.org/","label":"scan.flashsec.org","hostname":"scan.flashsec.org","tags":["X Refsource MISC"]},{"url":"http://kb.adobe.com/selfservice/viewContent.do?externalId=kb402956&sliceId=2","label":"kb.adobe.com/selfservice/viewContent.do?externalId=kb402956&sliceId=2","hostname":"kb.adobe.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/28161","label":"secunia.com/advisories/28161","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2007-1126.html","label":"www.redhat.com/support/errata/RHSA-2007-1126.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://secunia.com/advisories/32759","label":"secunia.com/advisories/32759","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0945.html","label":"www.redhat.com/support/errata/RHSA-2008-0945.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://www.redhat.com/support/errata/RHSA-2008-0980.html","label":"www.redhat.com/support/errata/RHSA-2008-0980.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT"]},{"url":"http://www.vupen.com/english/advisories/2007/4258","label":"www.vupen.com/english/advisories/2007/4258","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm","label":"support.avaya.com/elmodocs2/security/ASA-2008-440.htm","hostname":"support.avaya.com","tags":["X Refsource CONFIRM"]},{"url":"http://securitytracker.com/id?1019116","label":"securitytracker.com/id?1019116","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","label":"sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1","hostname":"sunsolve.sun.com","tags":["Vendor Advisory","X Refsource SUNALERT"]},{"url":"http://secunia.com/advisories/32448","label":"secunia.com/advisories/32448","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","label":"lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://secunia.com/advisories/28213","label":"secunia.com/advisories/28213","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.adobe.com/support/security/bulletins/apsb07-20.html","label":"www.adobe.com/support/security/bulletins/apsb07-20.html","hostname":"www.adobe.com","tags":["X Refsource CONFIRM"]}],"lineage":{"upstream":[],"downstream":["RHSA-2007:1126","RHSA-2008:0945","RHSA-2008:0980"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2007-08-14T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T14:53:55.445Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":22,"level":"low","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T06:43:37.268Z","stale":false,"partial":false}}