NVD

Id
57351  
Name
CVE-2007-5275  
Description
The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML document, and the availability of a Flash Socket class that does not use the browser"s DNS pins, aka DNS rebinding attacks, a different issue than CVE-2002-1467 and CVE-2007-4324.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-10-08  
Modified Date
2011-03-07  
Seq
2007-5275  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
293063 57351 CVE-2007-5275 http://crypto.stanford.edu/dns/dns-rebinding.pdf  View
293064 57351 CVE-2007-5275 APPLE-SA-2008-05-28  View
293065 57351 CVE-2007-5275 SUSE-SA:2007:069  View
293066 57351 CVE-2007-5275 SUSE-SA:2008:022  View
293067 57351 CVE-2007-5275 oval:org.mitre.oval:def:9250  View
293068 57351 CVE-2007-5275 1019116  View
293069 57351 CVE-2007-5275 238305  View
293070 57351 CVE-2007-5275 http://www.adobe.com/support/security/bulletins/apsb07-20.html  View
293071 57351 CVE-2007-5275 http://www.adobe.com/support/security/bulletins/apsb08-11.html  View
293072 57351 CVE-2007-5275 GLSA-200801-07  View
293073 57351 CVE-2007-5275 GLSA-200804-21  View
293074 57351 CVE-2007-5275 RHSA-2007:1126  View
293075 57351 CVE-2007-5275 RHSA-2008:0221  View
293076 57351 CVE-2007-5275 26930  View
293077 57351 CVE-2007-5275 TA07-355A  View
293078 57351 CVE-2007-5275 TA08-100A  View
293079 57351 CVE-2007-5275 TA08-150A  View
293080 57351 CVE-2007-5275 ADV-2007-4258  View
293081 57351 CVE-2007-5275 ADV-2008-1697  View
293082 57351 CVE-2007-5275 ADV-2008-1724  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52382 JVNDB-2007-001072 Adobe Macromedia Flash プラグインにおける DNS Rebinding 攻撃を受ける脆弱性 Adobe Macromedia Flash プラグインには、cross-domain-policy XML ドキュメント内の allow-access-from 要素を受信した後、単一 IP アドレスでホスト名を固定することの欠陥、及びブラウザの DNS pin を使用せず、Flash Socket クラスを使用可能になるため、Flash (SWF) ムービーを通してターゲットマシンが任意のホストへ TCP セッションを接続させることが可能な DNS Rebinding 攻撃を受ける脆弱性が存在します。 CVE-2007-5275 28630 CVE-2007-5275 57351 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001072.html 2007-10-08 2008-06-17 View