NVD脆弱性詳細

CVE-2007-6243

概要	Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-site scripting (XSS) attacks.
公表日	2007年12月20日10:46
登録日	2021年1月29日14:24
最終更新日	2017年9月29日10:29

CVSS2.0 : HIGH
スコア	9.3
ベクター	AV:N/AC:M/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
全ての特権を取得	いいえ
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	はい

影響を受けるソフトウェアの構成

構成1		以上	以下	より上	未満
cpe:2.3:a:adobe:flash_player::::::::			9.0.48.0

関連情報、対策とツール

No	URL	refsource	タグ
1	http://jvn.jp/jp/JVN%2345675516/index.html	JVN
2	http://lists.apple.com/archives/security-announce/2008//May/msg00001.html	APPLE
3	http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html	SUSE
4	http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html	SUSE
5	http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html	SUSE
6	http://secunia.com/advisories/28161	SECUNIA
7	http://secunia.com/advisories/28213	SECUNIA	Vendor Advisory
8	http://secunia.com/advisories/28570	SECUNIA
9	http://secunia.com/advisories/29763	SECUNIA	Vendor Advisory
10	http://secunia.com/advisories/29865	SECUNIA	Vendor Advisory
11	http://secunia.com/advisories/30430	SECUNIA	Vendor Advisory
12	http://secunia.com/advisories/30507	SECUNIA	Vendor Advisory
13	http://secunia.com/advisories/32448	SECUNIA	Vendor Advisory
14	http://secunia.com/advisories/32702	SECUNIA	Vendor Advisory
15	http://secunia.com/advisories/32759	SECUNIA	Vendor Advisory
16	http://secunia.com/advisories/33390	SECUNIA	Vendor Advisory
17	http://securitytracker.com/id?1019116	SECTRACK
18	http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1	SUNALERT
19	http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1	SUNALERT
20	http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm	CONFIRM
21	http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm	CONFIRM
22	http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=	CONFIRM
23	http://www.adobe.com/devnet/flashplayer/articles/fplayer9_security.html	MISC
24	http://www.adobe.com/support/security/bulletins/apsb07-20.html	CONFIRM	Vendor Advisory
25	http://www.adobe.com/support/security/bulletins/apsb08-11.html	CONFIRM
26	http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml	GENTOO
27	http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml	GENTOO
28	http://www.kb.cert.org/vuls/id/935737	CERT-VN	US Government Resource
29	http://www.redhat.com/support/errata/RHSA-2008-0221.html	REDHAT
30	http://www.redhat.com/support/errata/RHSA-2008-0945.html	REDHAT
31	http://www.redhat.com/support/errata/RHSA-2008-0980.html	REDHAT
32	http://www.securityfocus.com/bid/26929	BID
33	http://www.securityfocus.com/bid/26966	BID
34	http://www.us-cert.gov/cas/techalerts/TA07-355A.html	CERT	US Government Resource
35	http://www.us-cert.gov/cas/techalerts/TA08-100A.html	CERT	US Government Resource
36	http://www.us-cert.gov/cas/techalerts/TA08-150A.html	CERT	US Government Resource
37	http://www.vupen.com/english/advisories/2007/4258	VUPEN
38	http://www.vupen.com/english/advisories/2008/1697	VUPEN
39	http://www.vupen.com/english/advisories/2008/1724/references	VUPEN
40	https://exchange.xforce.ibmcloud.com/vulnerabilities/39129	XF
41	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11069	OVAL

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-264	認可・権限・アクセス制御	https://cwe.mitre.org/data/definitions/264.html