CVE-2007-2022: Infoleak

Published Apr 13, 2007

Updated

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes), which are leaked to the Flash Player applet.

Affected Software

76 affected components

opera Opera Browser=7.01

opera Opera Browser=7.23

opera Opera Browser=9.02

opera Opera Browser=7.03

opera Opera Browser=7.53

opera Opera Browser=8.50

opera Opera Browser=5.0-beta2

opera Opera Browser=5.11

opera Opera Browser=6.1

opera Opera Browser=7.20

opera Opera Browser=6.02

opera Opera Browser=5.02

opera Opera Browser=5.10

opera Opera Browser=8.53

opera Opera Browser=9.12

opera Opera Browser=7.11-beta2

opera Opera Browser=8.0

opera Opera Browser=6.04

Adobe Flash Player=9.0.18d60

opera Opera Browser=8.54

opera Opera Browser=6.11

opera Opera Browser=5.0-beta4

opera Opera Browser=6.05

opera Opera Browser=8.02

opera Opera Browser=7.50-beta1

opera Opera Browser=5.12

opera Opera Browser=7.10

opera Opera Browser=9.0-beta1

opera Opera Browser=6.0-tp3

opera Opera Browser=6.0-tp1

opera Opera Browser=8.0-beta3

opera Opera Browser=5.0-beta8

opera Opera Browser=7.0-beta1_v2

opera Opera Browser=8.51

opera Opera Browser=5.0-beta5

opera Opera Browser=7.50

opera Opera Browser=7.02

opera Opera Browser=7.21

opera Opera Browser=6.0-tp2

opera Opera Browser=5.0-beta7

opera Opera Browser=7.20-beta7

opera Opera Browser=7.54-update1

opera Opera Browser=7.60

opera Opera Browser=7.11

opera Opera Browser=7.0-beta2

opera Opera Browser=7.54

opera Opera Browser=9.0-beta2

Adobe Flash Player=9.0.28

opera Opera Browser=6.03

opera Opera Browser=7.0-beta1

opera Opera Browser=6.0-beta1

opera Opera Browser=9.01

opera Opera Browser=9.0

opera Opera Browser=5.0

opera Opera Browser=7.51

opera Opera Browser=8.0-beta2

opera Opera Browser=9.10

Adobe Flash Player=7.0.25

opera Opera Browser=6.12

Adobe Flash Player=8.0

opera Opera Browser=6.0-beta2

opera Opera Browser=5.0-beta3

opera Opera Browser=6.01

opera Opera Browser=8.52

opera Opera Browser=6.06

opera Opera Browser=7.52

opera Opera Browser=7.54-update2

opera Opera Browser=5.0-beta6

opera Opera Browser=8.01

opera Opera Browser=6.1-beta1

opera Opera Browser=8.0-beta1

Adobe Flash Player=9.0.20

opera Opera Browser=6.0

opera Opera Browser=7.22

opera Opera Browser=7.10-beta1

opera Opera Browser=7.0

Event History

Apr 13, 2007

CVE Published

06:19 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2022?

CVE-2007-2022 is classified as a medium severity vulnerability allowing for sensitive information leakage.

How does CVE-2007-2022 affect users?

CVE-2007-2022 allows remote attackers to capture browser keystrokes through affected versions of Adobe Flash Player.

How do I fix CVE-2007-2022?

To mitigate CVE-2007-2022, users should upgrade to the latest versions of both the Adobe Flash Player and unsupported browsers.

What browsers are affected by CVE-2007-2022?

CVE-2007-2022 impacts specific versions of the Opera browser and Adobe Flash Player used in conjunction with it.

Is CVE-2007-2022 still a concern today?

While CVE-2007-2022 is an older vulnerability, active use of affected software may still pose risks to users.