CVE-2007-3457: CSRF
Published Jul 11, 2007
·Updated
Adobe Flash Player 8.0.34.0 and earlier insufficiently validates HTTP Referer headers, which might allow remote attackers to conduct a CSRF attack via a crafted SWF file.
Affected Software
1 affected component
Adobe Flash Player<=8.0.34.0
Remediation
Patch Available
Event History
Jul 11, 2007
CVE Published
04:30 PM
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-3457?
CVE-2007-3457 is rated as a high-severity vulnerability due to its potential to facilitate CSRF attacks.
2
How do I fix CVE-2007-3457?
To fix CVE-2007-3457, upgrade to a later version of Adobe Flash Player beyond 8.0.34.0.
3
What kind of attack does CVE-2007-3457 allow?
CVE-2007-3457 allows remote attackers to conduct cross-site request forgery (CSRF) attacks.
4
Which versions of Adobe Flash Player are affected by CVE-2007-3457?
CVE-2007-3457 affects Adobe Flash Player versions 8.0.34.0 and earlier.
5
How does CVE-2007-3457 exploit referer header validation?
CVE-2007-3457 exploits insufficient validation of HTTP Referer headers to enable unauthorized actions on behalf of users.