CVE-2007-6019
First published: Wed Apr 09 2008(Updated: )
Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly.
Credit: PSIRT-CNA@flexerasoftware.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Flash Player | =9.0.16 | |
| Adobe Flash Player | <=9.0.115.0 | |
| Adobe Flash Player | =9.0.48.0 | |
| Adobe Flash Player | =8.0.24.0 | |
| Adobe Flash Player | =9.0.18d60 | |
| Adobe Air | =1.0 | |
| Adobe Flash Player | =7.1.1 | |
| Adobe Flash Player | =9.0.124.0 | |
| Adobe Flash Player | =9.0.47.0 | |
| Adobe Flash Player | =7.0.63 | |
| Adobe Flash Player | =7.0.70.0 | |
| Adobe Flash Player | =8.0.35.0 | |
| Adobe Flash Player | =9.0.114.0 | |
| Adobe Flash Player | =8.0 | |
| Adobe Flash Player | =9.0.20.0 | |
| Adobe Flash Player | =9.0.31.0 | |
| Adobe Flash Player | =9.0.112.0 | |
| Adobe Flash Player | =9.0.16 | |
| Adobe Flash Player | =8 | |
| Adobe Flash | =professional-cs3 | |
| Adobe Flash Player | =9.0.28.0 | |
| Adobe Flash Player | =7.0.69.0 | |
| Adobe Flash Player | =9.0.155.0 | |
| Adobe Flash Player | =9.0.28 | |
| Adobe Flash Player | =9.0.45.0 | |
| Adobe Flex | =3.0 | |
| Adobe Flash Player | =7.0 | |
| Adobe Flash Player | =9.0.31 | |
| Adobe Flash Player | =7.2 | |
| Adobe Flash Player | =7.0_r67 | |
| Adobe Flash | =basic-8 | |
| Adobe Flash Player | =7.0.25 | |
| Adobe Flash Player | =8.0 | |
| Adobe Flash Player | =8.0.39.0 | |
| Adobe Flash Player | =8.0.34.0 | |
| Adobe Flash Player | =8 | |
| Adobe Flash Player | =7.1 | |
| Adobe Flash Player | =9.0.20 | |
| Adobe Flash Player | =7.0.1 | |
| Adobe Flash Player | =8.0 | |
| Adobe Flash | =professional-8 | |
| Adobe Flash Player | =9.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.zerodayinitiative.com/advisories/ZDI-08-021
- http://www.adobe.com/support/security/bulletins/apsb08-11.html
- http://www.redhat.com/support/errata/RHSA-2008-0221.html
- http://www.securityfocus.com/bid/28694
- http://www.securitytracker.com/id?1019810
- http://www.us-cert.gov/cas/techalerts/TA08-100A.html
- http://securityreason.com/securityalert/3805
- http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html
- http://secunia.com/advisories/29763
- http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml
- http://secunia.com/advisories/29865
- http://lists.apple.com/archives/security-announce/2008//May/msg00001.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1
- http://www.us-cert.gov/cas/techalerts/TA08-150A.html
- http://secunia.com/advisories/30430
- http://secunia.com/advisories/30507
- http://www.vupen.com/english/advisories/2008/1697
- http://www.vupen.com/english/advisories/2008/1724/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41717
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10160
- http://www.securityfocus.com/archive/1/490824/100/0/threaded
- http://www.securityfocus.com/archive/1/490623/100/0/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- vendor/adobe
- canonical/adobe flash player
- version/adobe flash player/9.0.16
- version/adobe flash player/9.0.115.0
- version/adobe flash player/9.0.48.0
- version/adobe flash player/8.0.24.0
- version/adobe flash player/9.0.18d60
- canonical/adobe air
- version/adobe air/1.0
- version/adobe flash player/7.1.1
- version/adobe flash player/9.0.124.0
- version/adobe flash player/9.0.47.0
- version/adobe flash player/7.0.63
- version/adobe flash player/7.0.70.0
- version/adobe flash player/8.0.35.0
- version/adobe flash player/9.0.114.0
- version/adobe flash player/8.0
- version/adobe flash player/9.0.20.0
- version/adobe flash player/9.0.31.0
- version/adobe flash player/9.0.112.0
- version/adobe flash player/8
- canonical/adobe flash
- version/adobe flash/professional-cs3
- version/adobe flash player/9.0.28.0
- version/adobe flash player/7.0.69.0
- version/adobe flash player/9.0.155.0
- version/adobe flash player/9.0.28
- version/adobe flash player/9.0.45.0
- canonical/adobe flex
- version/adobe flex/3.0
- version/adobe flash player/7.0
- version/adobe flash player/9.0.31
- version/adobe flash player/7.2
- version/adobe flash player/7.0_r67
- version/adobe flash/basic-8
- version/adobe flash player/7.0.25
- version/adobe flash player/8.0.39.0
- version/adobe flash player/8.0.34.0
- version/adobe flash player/7.1
- version/adobe flash player/9.0.20
- version/adobe flash player/7.0.1
- version/adobe flash/professional-8
- version/adobe flash player/9.0