National Cyber Awareness System

Vulnerability Summary for CVE-2007-2022

Overview

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes), which are leaked to the Flash Player applet.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Technical Alert: TA07-192A

Name: TA07-192A

Hyperlink:http://www.us-cert.gov/cas/techalerts/TA07-192A.html

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-1462

Hyperlink:https://issues.rpath.com/browse/RPL-1462

External Source: XF

Name: opera-flash-player-unspecified(33595)

Hyperlink:http://xforce.iss.net/xforce/xfdb/33595

External Source: VUPEN

Name: ADV-2007-4190

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/4190

External Source: VUPEN

Name: ADV-2007-2497

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/2497

External Source: VUPEN

Name: ADV-2007-1361

Type: Advisory

Hyperlink:http://www.vupen.com/english/advisories/2007/1361

External Source: SECTRACK

Name: 1017903

Hyperlink:http://www.securitytracker.com/id?1017903

External Source: BID

Name: 23437

Hyperlink:http://www.securityfocus.com/bid/23437

External Source: REDHAT

Name: RHSA-2007:0494

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-0494.html

External Source: CONFIRM

Name: http://www.opera.com/support/search/view/858/

Hyperlink:http://www.opera.com/support/search/view/858/

External Source: SUSE

Name: SUSE-SA:2007:046

Hyperlink:http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html

External Source: SUSE

Name: SUSE-SA:2007:028

Hyperlink:http://www.novell.com/linux/security/advisories/2007_28_opera.html

External Source: SUSE

Name: SUSE-SR:2007:012

Hyperlink:http://www.novell.com/linux/security/advisories/2007_12_sr.html

External Source: MANDRIVA

Name: MDKSA-2007:138

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:138

External Source: GENTOO

Name: GLSA-200708-01

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml

External Source: CONFIRM

Name: http://www.adobe.com/support/security/bulletins/apsb07-12.html

Type: Advisory

Hyperlink:http://www.adobe.com/support/security/bulletins/apsb07-12.html

External Source: CONFIRM

Name: http://www.adobe.com/support/security/advisories/apsa07-03.html

Hyperlink:http://www.adobe.com/support/security/advisories/apsa07-03.html

External Source: SUNALERT

Name: 201506

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1

External Source: SUNALERT

Name: 103167

Hyperlink:http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1

External Source: SECUNIA

Name: 28068

Type: Advisory

Hyperlink:http://secunia.com/advisories/28068

External Source: SECUNIA

Name: 26860

Type: Advisory

Hyperlink:http://secunia.com/advisories/26860

External Source: SECUNIA

Name: 26357

Type: Advisory

Hyperlink:http://secunia.com/advisories/26357

External Source: SECUNIA

Name: 26118

Type: Advisory

Hyperlink:http://secunia.com/advisories/26118

External Source: SECUNIA

Name: 26027

Type: Advisory

Hyperlink:http://secunia.com/advisories/26027

External Source: SECUNIA

Name: 25933

Type: Advisory

Hyperlink:http://secunia.com/advisories/25933

External Source: SECUNIA

Name: 25894

Type: Advisory

Hyperlink:http://secunia.com/advisories/25894

External Source: SECUNIA

Name: 25669

Type: Advisory

Hyperlink:http://secunia.com/advisories/25669

External Source: SECUNIA

Name: 25662

Type: Advisory

Hyperlink:http://secunia.com/advisories/25662

External Source: SECUNIA

Name: 25432

Type: Advisory

Hyperlink:http://secunia.com/advisories/25432

External Source: SECUNIA

Name: 25027

Type: Advisory

Hyperlink:http://secunia.com/advisories/25027

External Source: SECUNIA

Name: 24877

Type: Advisory

Hyperlink:http://secunia.com/advisories/24877

External Source: OVAL

Name: oval:org.mitre.oval:def:9332

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9332

External Source: SGI

Name: 20070602-01-P

Hyperlink:ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc

References to Check Content

Identifier:oval:org.mitre.oval:def:9332

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:9332