NVD Vulnerability Detail
Search Exploit, PoC
CVE-2006-5330
Summary

CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions (1) XML.addRequestHeader and (2) XML.contentType. NOTE: the flexibility of the attack varies depending on the type of web browser being used.

Publication Date Oct. 18, 2006, 6:07 a.m.
Registration Date Jan. 29, 2021, 3:47 p.m.
Last Update Oct. 18, 2018, 6:42 a.m.
CVSS2.0 : MEDIUM
Score 5.0
Vector AV:N/AC:L/Au:N/C:N/I:P/A:N
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 低
攻撃前の認証要否(Au) 不要
機密性への影響(C) なし
完全性への影響(I) 低
可用性への影響(A) なし
Get all privileges. いいえ
Get user privileges いいえ
Get other privileges いいえ
User operation required いいえ
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:adobe:flash_player:*:*:linux:*:*:*:*:* 7.0.63
cpe:2.3:a:adobe:flash_player:*:*:solaris:*:*:*:*:* 7.0_r67
cpe:2.3:a:adobe:flash_player:*:*:windows:*:*:*:*:* 9.0.16
cpe:2.3:a:adobe:flash_player:*:*:mac_os_x:*:*:*:*:* 9.0.28.0
Related information, measures and tools
Common Vulnerabilities List