CVE-2007-2022

Published: Apr 13, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes), which are leaked to the Flash Player applet.

Affected (76)

Products: Adobe: Flash Player · Opera: Opera Browser

1 product

1 product

Configuration A

76 vulnerable

Vulnerable Software	Affected Versions
Adobe Flash Player	Version 7.0.25
Adobe Flash Player	Version 8.0
Adobe Flash Player	Version 9.0.18d60
Adobe Flash Player	Version 9.0.20
Adobe Flash Player	Version 9.0.28
Opera Opera Browser	Version 5.02
Opera Opera Browser	Version 5.0
Opera Opera Browser	Version 5.0 beta2
Opera Opera Browser	Version 5.0 beta3
Opera Opera Browser	Version 5.0 beta4
Opera Opera Browser	Version 5.0 beta5
Opera Opera Browser	Version 5.0 beta6
Opera Opera Browser	Version 5.0 beta7
Opera Opera Browser	Version 5.0 beta8
Opera Opera Browser	Version 5.10
Opera Opera Browser	Version 5.11
Opera Opera Browser	Version 5.12
Opera Opera Browser	Version 6.01
Opera Opera Browser	Version 6.02
Opera Opera Browser	Version 6.03
Opera Opera Browser	Version 6.04
Opera Opera Browser	Version 6.05
Opera Opera Browser	Version 6.06
Opera Opera Browser	Version 6.0
Opera Opera Browser	Version 6.0 beta1
Opera Opera Browser	Version 6.0 beta2
Opera Opera Browser	Version 6.0 tp1
Opera Opera Browser	Version 6.0 tp2
Opera Opera Browser	Version 6.0 tp3
Opera Opera Browser	Version 6.11
Opera Opera Browser	Version 6.12
Opera Opera Browser	Version 6.1
Opera Opera Browser	Version 6.1 beta1
Opera Opera Browser	Version 7.01
Opera Opera Browser	Version 7.02
Opera Opera Browser	Version 7.03
Opera Opera Browser	Version 7.0
Opera Opera Browser	Version 7.0 beta1
Opera Opera Browser	Version 7.0 beta1_v2
Opera Opera Browser	Version 7.0 beta2
Opera Opera Browser	Version 7.10
Opera Opera Browser	Version 7.10 beta1
Opera Opera Browser	Version 7.11
Opera Opera Browser	Version 7.11 beta2
Opera Opera Browser	Version 7.20
Opera Opera Browser	Version 7.20 beta7
Opera Opera Browser	Version 7.21
Opera Opera Browser	Version 7.22
Opera Opera Browser	Version 7.23
Opera Opera Browser	Version 7.50
Opera Opera Browser	Version 7.50 beta1
Opera Opera Browser	Version 7.51
Opera Opera Browser	Version 7.52
Opera Opera Browser	Version 7.53
Opera Opera Browser	Version 7.54
Opera Opera Browser	Version 7.54 update1
Opera Opera Browser	Version 7.54 update2
Opera Opera Browser	Version 7.60
Opera Opera Browser	Version 8.01
Opera Opera Browser	Version 8.02
Opera Opera Browser	Version 8.0
Opera Opera Browser	Version 8.0 beta1
Opera Opera Browser	Version 8.0 beta2
Opera Opera Browser	Version 8.0 beta3
Opera Opera Browser	Version 8.50
Opera Opera Browser	Version 8.51
Opera Opera Browser	Version 8.52
Opera Opera Browser	Version 8.53
Opera Opera Browser	Version 8.54
Opera Opera Browser	Version 9.01
Opera Opera Browser	Version 9.02
Opera Opera Browser	Version 9.0
Opera Opera Browser	Version 9.0 beta1
Opera Opera Browser	Version 9.0 beta2
Opera Opera Browser	Version 9.10
Opera Opera Browser	Version 9.12

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (66)

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc (unsafe URL)

Source: cve@mitre.org

http://secunia.com/advisories/24877

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25027

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25432

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25662

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25669

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25894

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/25933

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26027

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26118

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26357

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26860

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28068

Source: cve@mitre.org

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1

Source: cve@mitre.org

http://www.adobe.com/support/security/advisories/apsa07-03.html

Source: cve@mitre.org

http://www.adobe.com/support/security/bulletins/apsb07-12.html

Source: cve@mitre.org

Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:138

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_12_sr.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_28_opera.html

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html

Source: cve@mitre.org

http://www.opera.com/support/search/view/858/

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0494.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/23437

Source: cve@mitre.org

http://www.securitytracker.com/id?1017903

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA07-192A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2007/1361

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/2497

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/4190

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33595

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1462

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9332

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc (unsafe URL)