5

CVE-2006-5330

CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions (1) XML.addRequestHeader and (2) XML.contentType.  NOTE: the flexibility of the attack varies depending on the type of web browser being used.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Flash Player Editionlinux Version <= 7.0.63
Adobe ≫ Flash Player Editionsolaris Version <= 7.0_r67
Adobe ≫ Flash Player Editionwindows Version <= 9.0.16
Adobe ≫ Flash Player Editionmac_os_x Version <= 9.0.28.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 22.6% 0.974
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://docs.info.apple.com/article.html?artnum=305214
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
http://secunia.com/advisories/24479
Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA07-072A.html
US Government Resource
http://www.vupen.com/english/advisories/2007/0930
http://lists.suse.com/archive/suse-security-announce/2006-Dec/0006.html
http://secunia.com/advisories/22467
Vendor Advisory
http://secunia.com/advisories/23324
Vendor Advisory
http://secunia.com/advisories/23581
Vendor Advisory
http://secunia.com/advisories/25467
Vendor Advisory
http://securityreason.com/securityalert/1737
http://securitytracker.com/id?1017078
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102932-1
http://www.adobe.com/support/security/advisories/apsa06-01.html
http://www.adobe.com/support/security/bulletins/apsb06-18.html
http://www.osvdb.org/29863
http://www.rapid7.com/advisories/R7-0026.jsp
http://www.redhat.com/support/errata/RHSA-2007-0009.html
http://www.securityfocus.com/archive/1/448997/100/0/threaded
http://www.securityfocus.com/bid/20592
http://www.vupen.com/english/advisories/2006/4094
http://www.vupen.com/english/advisories/2007/1999
https://exchange.xforce.ibmcloud.com/vulnerabilities/29634
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11405