CVE-2007-6242

critical

Description

Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors, related to "input validation errors."

References

Advisories
More

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9188

https://exchange.xforce.ibmcloud.com/vulnerabilities/39128

http://www.vupen.com/english/advisories/2008/1724/references

http://www.vupen.com/english/advisories/2007/4258

http://www.us-cert.gov/cas/techalerts/TA07-355A.html

http://www.securityfocus.com/bid/26951

http://www.redhat.com/support/errata/RHSA-2007-1126.html

http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml

http://securitytracker.com/id?1019116

http://secunia.com/advisories/30507

http://secunia.com/advisories/28570

http://secunia.com/advisories/28213

http://secunia.com/advisories/28161

http://secunia.com/advisories/28157

http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html

http://www.adobe.com/support/security/bulletins/apsb07-20.html

Details

Source: Mitre, NVD

Published: 2007-12-20

Updated: 2025-04-09

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.60627

Detections

Analytics