CVE-2007-6019
First published: Wed Apr 09 2008(Updated: )
Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly.
Credit: PSIRT-CNA@flexerasoftware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe AIR | =1.0 | |
| Adobe Flash Player | =basic-8 | |
| Adobe Flash Player | =professional-8 | |
| Adobe Flash Player | =professional-cs3 | |
| Adobe Flash Player for Internet Explorer 11 | <=9.0.115.0 | |
| Adobe Flash Player for Internet Explorer 11 | =7.0 | |
| Adobe Flash Player for Internet Explorer 11 | =7.0.1 | |
| Adobe Flash Player for Internet Explorer 11 | =7.0.25 | |
| Adobe Flash Player for Internet Explorer 11 | =7.0.63 | |
| Adobe Flash Player for Internet Explorer 11 | =7.0.69.0 | |
| Adobe Flash Player for Internet Explorer 11 | =7.0.70.0 | |
| Adobe Flash Player for Internet Explorer 11 | =7.0_r67 | |
| Adobe Flash Player for Internet Explorer 11 | =7.1 | |
| Adobe Flash Player for Internet Explorer 11 | =7.1.1 | |
| Adobe Flash Player for Internet Explorer 11 | =7.2 | |
| Adobe Flash Player for Internet Explorer 11 | =8 | |
| Adobe Flash Player for Internet Explorer 11 | =8 | |
| Adobe Flash Player for Internet Explorer 11 | =8.0 | |
| Adobe Flash Player for Internet Explorer 11 | =8.0 | |
| Adobe Flash Player for Internet Explorer 11 | =8.0 | |
| Adobe Flash Player for Internet Explorer 11 | =8.0.24.0 | |
| Adobe Flash Player for Internet Explorer 11 | =8.0.34.0 | |
| Adobe Flash Player for Internet Explorer 11 | =8.0.35.0 | |
| Adobe Flash Player for Internet Explorer 11 | =8.0.39.0 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.16 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.16 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.18d60 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.20 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.20.0 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.28 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.28.0 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.31 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.31.0 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.45.0 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.47.0 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.48.0 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.112.0 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.114.0 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.124.0 | |
| Adobe Flash Player for Internet Explorer 11 | =9.0.155.0 | |
| Adobe Flex | =3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.zerodayinitiative.com/advisories/ZDI-08-021
- http://www.adobe.com/support/security/bulletins/apsb08-11.html
- http://www.redhat.com/support/errata/RHSA-2008-0221.html
- http://www.securityfocus.com/bid/28694
- http://www.securitytracker.com/id?1019810
- http://www.us-cert.gov/cas/techalerts/TA08-100A.html
- http://securityreason.com/securityalert/3805
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html
- http://secunia.com/advisories/29763
- http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml
- http://secunia.com/advisories/29865
- http://lists.apple.com/archives/security-announce/2008//May/msg00001.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1
- http://www.us-cert.gov/cas/techalerts/TA08-150A.html
- http://secunia.com/advisories/30430
- http://secunia.com/advisories/30507
- http://www.vupen.com/english/advisories/2008/1697
- http://www.vupen.com/english/advisories/2008/1724/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41717
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10160
- http://www.securityfocus.com/archive/1/490824/100/0/threaded
- http://www.securityfocus.com/archive/1/490623/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2007-6019?
CVE-2007-6019 has been classified as a critical severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2007-6019?
To fix CVE-2007-6019, update Adobe Flash Player to version 9.0.115.1 or later, or upgrade to the latest version of Adobe AIR.
What software is affected by CVE-2007-6019?
CVE-2007-6019 affects Adobe Flash Player versions 9.0.115.0 and earlier, as well as versions 8.0.39.0 and earlier.
What are the risks associated with CVE-2007-6019?
Exploiting CVE-2007-6019 could allow an attacker to execute arbitrary code, potentially compromising the user's system and sensitive data.
Is there a workaround for CVE-2007-6019?
The best workaround for CVE-2007-6019 is to disable Adobe Flash Player until an update can be applied.
- agent/type
- agent/references
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/author
- agent/softwarecombine
- agent/description
- agent/tags
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/adobe
- canonical/adobe air
- version/adobe air/1.0
- canonical/adobe flash player
- version/adobe flash player/basic-8
- version/adobe flash player/professional-8
- version/adobe flash player/professional-cs3
- canonical/adobe flash player for internet explorer 11
- version/adobe flash player for internet explorer 11/9.0.115.0
- version/adobe flash player for internet explorer 11/7.0
- version/adobe flash player for internet explorer 11/7.0.1
- version/adobe flash player for internet explorer 11/7.0.25
- version/adobe flash player for internet explorer 11/7.0.63
- version/adobe flash player for internet explorer 11/7.0.69.0
- version/adobe flash player for internet explorer 11/7.0.70.0
- version/adobe flash player for internet explorer 11/7.0_r67
- version/adobe flash player for internet explorer 11/7.1
- version/adobe flash player for internet explorer 11/7.1.1
- version/adobe flash player for internet explorer 11/7.2
- version/adobe flash player for internet explorer 11/8
- version/adobe flash player for internet explorer 11/8.0
- version/adobe flash player for internet explorer 11/8.0.24.0
- version/adobe flash player for internet explorer 11/8.0.34.0
- version/adobe flash player for internet explorer 11/8.0.35.0
- version/adobe flash player for internet explorer 11/8.0.39.0
- version/adobe flash player for internet explorer 11/9.0
- version/adobe flash player for internet explorer 11/9.0.16
- version/adobe flash player for internet explorer 11/9.0.18d60
- version/adobe flash player for internet explorer 11/9.0.20
- version/adobe flash player for internet explorer 11/9.0.20.0
- version/adobe flash player for internet explorer 11/9.0.28
- version/adobe flash player for internet explorer 11/9.0.28.0
- version/adobe flash player for internet explorer 11/9.0.31
- version/adobe flash player for internet explorer 11/9.0.31.0
- version/adobe flash player for internet explorer 11/9.0.45.0
- version/adobe flash player for internet explorer 11/9.0.47.0
- version/adobe flash player for internet explorer 11/9.0.48.0
- version/adobe flash player for internet explorer 11/9.0.112.0
- version/adobe flash player for internet explorer 11/9.0.114.0
- version/adobe flash player for internet explorer 11/9.0.124.0
- version/adobe flash player for internet explorer 11/9.0.155.0
- canonical/adobe flex
- version/adobe flex/3.0