CVE-2007-6243: adobe flash_player

CVSS: 9.3v2.0HighModified

Published 20-12-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-6243 is a high (CVSS 9.3) vulnerability in adobe flash_player. EPSS estimates a 8.47% chance of exploitation in the next 30 days, higher than 94.9% of scored vulnerabilities.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

8.47%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4

RHSA-2007:1126 RHSA-2008:0221 RHSA-2008:0945 RHSA-2008:0980

Timeline

20-12-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

8.47%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.47% on 20-09-2026

20-09-202620-10-2026

EPSS score

8.47%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Affected systems

Adobe1 product

flash_player≤ 9.0.48.0

1 vendor · 1 product

References

41 links

support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=X Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/29865Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/33390Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/30507Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/28570Third Party AdvisoryX Refsource SECUNIA
www.adobe.com/support/security/bulletins/apsb08-11.htmlX Refsource CONFIRM
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11069VDB EntrySignatureX Refsource OVAL
support.avaya.com/elmodocs2/security/ASA-2009-020.htmX Refsource CONFIRM
secunia.com/advisories/32702Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 41 references

www.vupen.com/english/advisories/2008/1724/referencesVDB EntryX Refsource VUPEN
www.us-cert.gov/cas/techalerts/TA07-355A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.gentoo.org/security/en/glsa/glsa-200801-07.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/support/errata/RHSA-2008-0221.htmlVendor AdvisoryX Refsource REDHAT
www.us-cert.gov/cas/techalerts/TA08-150A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
jvn.jp/jp/JVN%2345675516/index.htmlThird Party AdvisoryX Refsource JVN
www.kb.cert.org/vuls/id/935737Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.adobe.com/devnet/flashplayer/articles/fplayer9_security.htmlX Refsource MISC
secunia.com/advisories/30430Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.apple.com/archives/security-announce/2008//May/msg00001.htmlVendor AdvisoryX Refsource APPLE
lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.htmlVendor AdvisoryX Refsource SUSE
www.securityfocus.com/bid/26929VDB EntryX Refsource BID
secunia.com/advisories/28161Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/32759Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29763Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2008-0945.htmlVendor AdvisoryX Refsource REDHAT
sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1Vendor AdvisoryX Refsource SUNALERT
www.redhat.com/support/errata/RHSA-2008-0980.htmlVendor AdvisoryX Refsource REDHAT
www.vupen.com/english/advisories/2007/4258VDB EntryX Refsource VUPEN
support.avaya.com/elmodocs2/security/ASA-2008-440.htmX Refsource CONFIRM
securitytracker.com/id?1019116VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/26966VDB EntryX Refsource BID
www.gentoo.org/security/en/glsa/glsa-200804-21.xmlVendor AdvisoryX Refsource GENTOO
www.vupen.com/english/advisories/2008/1697VDB EntryX Refsource VUPEN
sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1Vendor AdvisoryX Refsource SUNALERT
secunia.com/advisories/32448Third Party AdvisoryX Refsource SECUNIAVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/39129VDB EntryX Refsource XF
www.us-cert.gov/cas/techalerts/TA08-100A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/28213Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.adobe.com/support/security/bulletins/apsb07-20.htmlX Refsource CONFIRMVendor Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities