| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2008-3872 | 9.3 |
Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAccess parameter setting via a crafted SWF file with unspecified "Filter evasion" manipulations.
|
23-07-2019 - 14:42 | 06-10-2008 - 18:00 | |
| CVE-2007-6019 | 9.3 |
Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly.
|
30-10-2018 - 16:26 | 09-04-2008 - 21:05 | |
| CVE-2007-0071 | 9.3 |
Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via a crafted SWF file with a negative Scene Count value, which passes a signed comparison, is used as an offset
|
30-10-2018 - 16:26 | 09-04-2008 - 21:05 | |
| CVE-2007-6637 | 4.3 |
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect.
|
29-09-2017 - 01:30 | 04-01-2008 - 00:46 | |
| CVE-2008-1654 | 4.3 |
Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF) style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP co
|
29-09-2017 - 01:30 | 02-04-2008 - 18:44 | |
| CVE-2008-1655 | 4.3 |
Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.
|
29-09-2017 - 01:30 | 09-04-2008 - 21:05 | |
| CVE-2007-5275 | 5.0 |
The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-ac
|
29-09-2017 - 01:29 | 08-10-2007 - 23:17 | |
| CVE-2007-6243 | 9.3 |
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the interpretation and usage of cross-domain policy files, which makes it easier for remote attackers to conduct cross-domain and cross-s
|
29-09-2017 - 01:29 | 20-12-2007 - 01:46 |