NVD

Id
56449  
Name
CVE-2007-4324  
Description
ActionScript 3 (AS3) in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allows remote attackers to bypass the Security Sandbox Model, obtain sensitive information, and port scan arbitrary hosts via a Flash (SWF) movie that specifies a connection to make, then uses timing discrepancies from the SecurityErrorEvent error to determine whether a port is open or not. NOTE: 9.0.115.0 introduces support for a workaround, but does not fix the vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-08-13  
Modified Date
2011-03-07  
Seq
2007-4324  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
287522 56449 CVE-2007-4324 http://kb.adobe.com/selfservice/viewContent.do?externalId=kb402956&sliceId=2  View
287523 56449 CVE-2007-4324 SUSE-SA:2007:069  View
287524 56449 CVE-2007-4324 SUSE-SR:2008:025  View
287525 56449 CVE-2007-4324 oval:org.mitre.oval:def:11874  View
287526 56449 CVE-2007-4324 http://scan.flashsec.org/  View
287527 56449 CVE-2007-4324 2995  View
287528 56449 CVE-2007-4324 1019116  View
287529 56449 CVE-2007-4324 238305  View
287530 56449 CVE-2007-4324 248586  View
287531 56449 CVE-2007-4324 http://support.avaya.com/elmodocs2/security/ASA-2008-440.htm  View
287532 56449 CVE-2007-4324 http://support.avaya.com/elmodocs2/security/ASA-2009-020.htm  View
287533 56449 CVE-2007-4324 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&DocumentOID=834256&poid=  View
287534 56449 CVE-2007-4324 http://www.adobe.com/devnet/flashplayer/articles/fplayer10_security_changes.html  View
287535 56449 CVE-2007-4324 http://www.adobe.com/support/security/bulletins/apsb07-20.html  View
287536 56449 CVE-2007-4324 http://www.adobe.com/support/security/bulletins/apsb08-18.html  View
287537 56449 CVE-2007-4324 GLSA-200801-07  View
287538 56449 CVE-2007-4324 RHSA-2007:1126  View
287539 56449 CVE-2007-4324 RHSA-2008:0945  View
287540 56449 CVE-2007-4324 RHSA-2008:0980  View
287541 56449 CVE-2007-4324 20070809 Design flaw in AS3 socket handling allows port probing  View
287542 56449 CVE-2007-4324 25260  View
287543 56449 CVE-2007-4324 TA07-355A  View
287544 56449 CVE-2007-4324 ADV-2007-4258  View
287545 56449 CVE-2007-4324 ADV-2008-1724  View
287546 56449 CVE-2007-4324 ADV-2008-2838  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52381 JVNDB-2007-001071 Adobe Flash Player の AS3 におけるポートスキャンに利用される脆弱性 Adobe Flash Player の ActionScript 3 (AS3) には、Security Sandbox Model を回避し、接続時の SecurityErrorEvent エラーからのタイミングの相違を利用して、任意のホストへポートスキャン可能な脆弱性が存在します。 CVE-2007-4324 27679 CVE-2007-4324 56449 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001071.html 2007-08-13 2009-02-10 View