2017-10-16 12:31:07 -04:00
{
2019-03-17 23:02:57 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org" ,
"ID" : "CVE-2007-4324" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
2017-10-16 12:31:07 -04:00
]
2019-03-17 23:02:57 +00:00
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "ActionScript 3 (AS3) in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allows remote attackers to bypass the Security Sandbox Model, obtain sensitive information, and port scan arbitrary hosts via a Flash (SWF) movie that specifies a connection to make, then uses timing discrepancies from the SecurityErrorEvent error to determine whether a port is open or not. NOTE: 9.0.115.0 introduces support for a workaround, but does not fix the vulnerability."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=" ,
"refsource" : "CONFIRM" ,
"url" : "http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid="
} ,
{
"name" : "SUSE-SA:2007:069" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.html"
} ,
{
"name" : "28157" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/28157"
} ,
{
"name" : "33390" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/33390"
} ,
{
"name" : "2995" ,
"refsource" : "SREASON" ,
"url" : "http://securityreason.com/securityalert/2995"
} ,
{
"name" : "30507" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/30507"
} ,
{
"name" : "oval:org.mitre.oval:def:11874" ,
"refsource" : "OVAL" ,
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11874"
} ,
{
"name" : "http://www.adobe.com/support/security/bulletins/apsb08-18.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.adobe.com/support/security/bulletins/apsb08-18.html"
} ,
{
"name" : "28570" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/28570"
} ,
{
"name" : "http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm" ,
"refsource" : "CONFIRM" ,
"url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm"
} ,
{
"name" : "32270" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/32270"
} ,
{
"name" : "32702" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/32702"
} ,
{
"name" : "http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html"
} ,
{
"name" : "ADV-2008-1724" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2008/1724/references"
} ,
{
"name" : "TA07-355A" ,
"refsource" : "CERT" ,
"url" : "http://www.us-cert.gov/cas/techalerts/TA07-355A.html"
} ,
{
"name" : "20070809 Design flaw in AS3 socket handling allows port probing" ,
"refsource" : "BUGTRAQ" ,
"url" : "http://www.securityfocus.com/archive/1/475961/100/0/threaded"
} ,
{
"name" : "GLSA-200801-07" ,
"refsource" : "GENTOO" ,
"url" : "http://www.gentoo.org/security/en/glsa/glsa-200801-07.xml"
} ,
{
"name" : "25260" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/25260"
} ,
{
"name" : "ADV-2008-2838" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2008/2838"
} ,
{
"name" : "http://scan.flashsec.org/" ,
"refsource" : "MISC" ,
"url" : "http://scan.flashsec.org/"
} ,
{
"name" : "http://kb.adobe.com/selfservice/viewContent.do?externalId=kb402956&sliceId=2" ,
"refsource" : "CONFIRM" ,
"url" : "http://kb.adobe.com/selfservice/viewContent.do?externalId=kb402956&sliceId=2"
} ,
{
"name" : "28161" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/28161"
} ,
{
"name" : "RHSA-2007:1126" ,
"refsource" : "REDHAT" ,
"url" : "http://www.redhat.com/support/errata/RHSA-2007-1126.html"
} ,
{
"name" : "32759" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/32759"
} ,
{
"name" : "RHSA-2008:0945" ,
"refsource" : "REDHAT" ,
"url" : "http://www.redhat.com/support/errata/RHSA-2008-0945.html"
} ,
{
"name" : "238305" ,
"refsource" : "SUNALERT" ,
"url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1"
} ,
{
"name" : "RHSA-2008:0980" ,
"refsource" : "REDHAT" ,
"url" : "http://www.redhat.com/support/errata/RHSA-2008-0980.html"
} ,
{
"name" : "ADV-2007-4258" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2007/4258"
} ,
{
"name" : "http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm" ,
"refsource" : "CONFIRM" ,
"url" : "http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm"
} ,
{
"name" : "1019116" ,
"refsource" : "SECTRACK" ,
"url" : "http://securitytracker.com/id?1019116"
} ,
{
"name" : "248586" ,
"refsource" : "SUNALERT" ,
"url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-26-248586-1"
} ,
{
"name" : "32448" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/32448"
} ,
{
"name" : "SUSE-SR:2008:025" ,
"refsource" : "SUSE" ,
"url" : "http://lists.opensuse.org/opensuse-security-announce/2008-11/msg00001.html"
} ,
{
"name" : "28213" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/28213"
} ,
{
"name" : "http://www.adobe.com/support/security/bulletins/apsb07-20.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.adobe.com/support/security/bulletins/apsb07-20.html"
}
]
}
}
