CVE-2007-6244: XSS
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and 8.x up to 8.0.35.0 allow remote attackers to inject arbitrary web script or HTML via (1) a SWF file that uses the asfunction: protocol or (2) the navigateToURL function when used with the Flash Player ActiveX Control in Internet Explorer.
Affected Software
Event History
Frequently Asked Questions
What are the risks associated with CVE-2007-6244?
CVE-2007-6244 poses risks of cross-site scripting attacks that can lead to unauthorized actions on behalf of users.
How can I determine if my software is affected by CVE-2007-6244?
You can determine if your software is affected by CVE-2007-6244 by checking if you are using Adobe Flash Player versions 8.0 or 9.0 up to 9.0.48.0.
What steps should be taken to mitigate CVE-2007-6244?
To mitigate CVE-2007-6244, you should update Adobe Flash Player to the latest version that addresses these vulnerabilities.
What types of attacks can be executed due to CVE-2007-6244?
Attackers can exploit CVE-2007-6244 to inject arbitrary web scripts or HTML, which can result in phishing attacks or data theft.
Is there a patch available for CVE-2007-6244?
Yes, Adobe has released patches for CVE-2007-6244 as part of their security bulletins for affected versions of Flash Player.