CVE-2007-6242: adobe flash_player Improper Input Validation

CVSS: 6.8v2.0MediumModified

Published 20-12-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-6242 is a medium (CVSS 6.8) Improper Input Validation vulnerability in adobe flash_player. EPSS estimates a 30.06% chance of exploitation in the next 30 days, higher than 98.2% of scored vulnerabilities.

Overall risk

33/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

30.06%

0%100%

High · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1

RHSA-2007:1126

Timeline

20-12-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors, related to "input validation errors."

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

30.06%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 30.06% on 20-09-2026

20-09-202620-10-2026

EPSS score

30.06%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Adobe1 product

flash_player≥ 9.0.16.0, ≤ 9.0.48.0

1 vendor · 1 product

References

17 links

lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.htmlVendor AdvisoryX Refsource SUSEMailing ListThird Party Advisory
secunia.com/advisories/28157Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/30507Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/28570Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/1724/referencesVDB EntryX Refsource VUPENThird Party Advisory
www.us-cert.gov/cas/techalerts/TA07-355A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
exchange.xforce.ibmcloud.com/vulnerabilities/39128VDB EntryX Refsource XFThird Party Advisory
www.securityfocus.com/bid/26951VDB EntryX Refsource BIDThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-200801-07.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9188VDB EntrySignatureX Refsource OVALThird Party Advisory

Show all 17 references

secunia.com/advisories/28161Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2007-1126.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1Vendor AdvisoryX Refsource SUNALERTBroken Link
www.vupen.com/english/advisories/2007/4258VDB EntryX Refsource VUPENThird Party Advisory
securitytracker.com/id?1019116VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/28213Third Party AdvisoryX Refsource SECUNIA
www.adobe.com/support/security/bulletins/apsb07-20.htmlX Refsource CONFIRMVendor Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities