6.8

CVE-2007-2022

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes), which are leaked to the Flash Player applet.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Adobe ≫ Flash Player Version 7.0.25
Adobe ≫ Flash Player Version 8.0
Adobe ≫ Flash Player Version 9.0.18d60
Adobe ≫ Flash Player Version 9.0.20
Adobe ≫ Flash Player Version 9.0.28
Opera ≫ Opera Browser Version 5.0
Opera ≫ Opera Browser Version 5.0 Update beta2
Opera ≫ Opera Browser Version 5.0 Update beta3
Opera ≫ Opera Browser Version 5.0 Update beta4
Opera ≫ Opera Browser Version 5.0 Update beta5
Opera ≫ Opera Browser Version 5.0 Update beta6
Opera ≫ Opera Browser Version 5.0 Update beta7
Opera ≫ Opera Browser Version 5.0 Update beta8
Opera ≫ Opera Browser Version 5.02
Opera ≫ Opera Browser Version 5.10
Opera ≫ Opera Browser Version 5.11
Opera ≫ Opera Browser Version 5.12
Opera ≫ Opera Browser Version 6.0
Opera ≫ Opera Browser Version 6.0 Update beta1
Opera ≫ Opera Browser Version 6.0 Update beta2
Opera ≫ Opera Browser Version 6.0 Update tp1
Opera ≫ Opera Browser Version 6.0 Update tp2
Opera ≫ Opera Browser Version 6.0 Update tp3
Opera ≫ Opera Browser Version 6.1
Opera ≫ Opera Browser Version 6.01
Opera ≫ Opera Browser Version 6.1 Update beta1
Opera ≫ Opera Browser Version 6.02
Opera ≫ Opera Browser Version 6.03
Opera ≫ Opera Browser Version 6.04
Opera ≫ Opera Browser Version 6.05
Opera ≫ Opera Browser Version 6.06
Opera ≫ Opera Browser Version 6.11
Opera ≫ Opera Browser Version 6.12
Opera ≫ Opera Browser Version 7.0
Opera ≫ Opera Browser Version 7.0 Update beta1
Opera ≫ Opera Browser Version 7.0 Update beta1_v2
Opera ≫ Opera Browser Version 7.0 Update beta2
Opera ≫ Opera Browser Version 7.01
Opera ≫ Opera Browser Version 7.02
Opera ≫ Opera Browser Version 7.03
Opera ≫ Opera Browser Version 7.10
Opera ≫ Opera Browser Version 7.10 Update beta1
Opera ≫ Opera Browser Version 7.11
Opera ≫ Opera Browser Version 7.11 Update beta2
Opera ≫ Opera Browser Version 7.20
Opera ≫ Opera Browser Version 7.20 Update beta7
Opera ≫ Opera Browser Version 7.21
Opera ≫ Opera Browser Version 7.22
Opera ≫ Opera Browser Version 7.23
Opera ≫ Opera Browser Version 7.50
Opera ≫ Opera Browser Version 7.50 Update beta1
Opera ≫ Opera Browser Version 7.51
Opera ≫ Opera Browser Version 7.52
Opera ≫ Opera Browser Version 7.53
Opera ≫ Opera Browser Version 7.54
Opera ≫ Opera Browser Version 7.54 Update update1
Opera ≫ Opera Browser Version 7.54 Update update2
Opera ≫ Opera Browser Version 7.60
Opera ≫ Opera Browser Version 8.0
Opera ≫ Opera Browser Version 8.0 Update beta1
Opera ≫ Opera Browser Version 8.0 Update beta2
Opera ≫ Opera Browser Version 8.0 Update beta3
Opera ≫ Opera Browser Version 8.01
Opera ≫ Opera Browser Version 8.02
Opera ≫ Opera Browser Version 8.50
Opera ≫ Opera Browser Version 8.51
Opera ≫ Opera Browser Version 8.52
Opera ≫ Opera Browser Version 8.53
Opera ≫ Opera Browser Version 8.54
Opera ≫ Opera Browser Version 9.0
Opera ≫ Opera Browser Version 9.0 Update beta1
Opera ≫ Opera Browser Version 9.0 Update beta2
Opera ≫ Opera Browser Version 9.01
Opera ≫ Opera Browser Version 9.02
Opera ≫ Opera Browser Version 9.10
Opera ≫ Opera Browser Version 9.12
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.96% 0.912
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
http://secunia.com/advisories/25894
Vendor Advisory
http://secunia.com/advisories/25432
Vendor Advisory
http://www.novell.com/linux/security/advisories/2007_12_sr.html
http://secunia.com/advisories/25027
Vendor Advisory
http://www.novell.com/linux/security/advisories/2007_28_opera.html
http://secunia.com/advisories/24877
Vendor Advisory
http://secunia.com/advisories/25662
Vendor Advisory
http://secunia.com/advisories/25669
Vendor Advisory
http://secunia.com/advisories/25933
Vendor Advisory
http://secunia.com/advisories/26027
Vendor Advisory
http://secunia.com/advisories/26118
Vendor Advisory
http://secunia.com/advisories/26357
Vendor Advisory
http://secunia.com/advisories/26860
Vendor Advisory
http://secunia.com/advisories/28068
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1
http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1
http://www.adobe.com/support/security/advisories/apsa07-03.html
http://www.adobe.com/support/security/bulletins/apsb07-12.html
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:138
http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html
http://www.opera.com/support/search/view/858/
http://www.redhat.com/support/errata/RHSA-2007-0494.html
http://www.securityfocus.com/bid/23437
http://www.securitytracker.com/id?1017903
http://www.us-cert.gov/cas/techalerts/TA07-192A.html
US Government Resource
http://www.vupen.com/english/advisories/2007/1361
Vendor Advisory
http://www.vupen.com/english/advisories/2007/2497
Vendor Advisory
http://www.vupen.com/english/advisories/2007/4190
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33595
https://issues.rpath.com/browse/RPL-1462
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9332