Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2007-6637 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2007-6637

CVE-2007-6637

UNKNOWN

Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect

Published Jan 4, 2008

Modified 1 years ago

Details

Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect. NOTE: the asfunction: vector is already covered by CVE-2007-6244.1.

References

ADVISORYhttp://lists.apple.com/archives/security-announce/2008//May/msg00001.html ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html ADVISORYhttp://secunia.com/advisories/29763 ADVISORYhttp://secunia.com/advisories/29865 ADVISORYhttp://secunia.com/advisories/30430 ADVISORYhttp://secunia.com/advisories/30507 WEBhttp://securitytracker.com/id?1019141 ADVISORYhttp://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1 WEBhttp://www.adobe.com/support/security/advisories/apsa07-06.html WEBhttp://www.adobe.com/support/security/bulletins/apsb08-11.html ADVISORYhttp://www.gentoo.org/security/en/glsa/glsa-200804-21.xml ADVISORYhttp://www.redhat.com/support/errata/RHSA-2008-0221.html WEBhttp://www.securityfocus.com/bid/27034 ADVISORYhttp://www.us-cert.gov/cas/techalerts/TA08-100A.html ADVISORYhttp://www.us-cert.gov/cas/techalerts/TA08-150A.html WEBhttp://www.vupen.com/english/advisories/2008/1697 WEBhttp://www.vupen.com/english/advisories/2008/1724/references WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9828 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2007-6637

CVSS Analysis

CVSS v2.0

4.3

Exploitability

Access Vector

NetworkAV:N

Access Complexity

MediumAC:M

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

4.3/AV:N/AC:M/Au:N/C:N/I:P/A:N

Ecosystems

Timeline

PublishedJan 4, 2008

ModifiedAug 7, 2024