NVD

Id
63932  
Name
CVE-2006-5330  
Description
CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions (1) XML.addRequestHeader and (2) XML.contentType. NOTE: the flexibility of the attack varies depending on the type of web browser being used.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-10-17  
Modified Date
2011-03-07  
Seq
2006-5330  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
333238 63932 CVE-2006-5330 http://docs.info.apple.com/article.html?artnum=305214  View
333239 63932 CVE-2006-5330 APPLE-SA-2007-03-13  View
333240 63932 CVE-2006-5330 SUSE-SA:2006:077  View
333241 63932 CVE-2006-5330 oval:org.mitre.oval:def:11405  View
333242 63932 CVE-2006-5330 1737  View
333243 63932 CVE-2006-5330 1017078  View
333244 63932 CVE-2006-5330 102932  View
333245 63932 CVE-2006-5330 http://www.adobe.com/support/security/advisories/apsa06-01.html  View
333246 63932 CVE-2006-5330 http://www.adobe.com/support/security/bulletins/apsb06-18.html  View
333247 63932 CVE-2006-5330 http://www.rapid7.com/advisories/R7-0026.jsp  View
333248 63932 CVE-2006-5330 RHSA-2007:0009  View
333249 63932 CVE-2006-5330 20061017 Rapid7 Advisory R7-0026: HTTP Header Injection Vulnerabilities in the Flash Player Plugin  View
333250 63932 CVE-2006-5330 20592  View
333251 63932 CVE-2006-5330 TA07-072A  View
333252 63932 CVE-2006-5330 ADV-2006-4094  View
333253 63932 CVE-2006-5330 ADV-2007-0930  View
333254 63932 CVE-2006-5330 ADV-2007-1999  View
333255 63932 CVE-2006-5330 flashplayer-multiple-xsrf(29634)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58525 JVNDB-2006-000721 Adobe Flash Player における HTTP ヘッダインジェクションの脆弱性 Adobe Flash Player における XML.addRequestHeader() メソッドおよび XML.contentType プロパティでは、取り扱う文字列に対するチェックに不備が存在するため、HTTP リクエストヘッダ部分に改行コードを挿入可能な脆弱性が存在します。 CVE-2006-5330 21432 CVE-2006-5330 63932 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000721.html 2006-10-17 2007-06-06 View