CVE-2007-6019

Published: Apr 9, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a modified DeclareFunction2 Actionscript tag, which prevents an object from being instantiated properly.

Affected (42)

Products: Adobe: Air, Flash, Flash Player, Flex

4 products

Configuration A

42 vulnerable

Vulnerable Software	Affected Versions
Adobe Air	Version 1.0
Adobe Flash	Version basic 8
Adobe Flash	Version professional 8
Adobe Flash	Version professional cs3
Adobe Flash Player	Up to 9.0.115.0
Adobe Flash Player	Version 7.0.1
Adobe Flash Player	Version 7.0.25
Adobe Flash Player	Version 7.0.63
Adobe Flash Player	Version 7.0.69.0
Adobe Flash Player	Version 7.0.70.0
Adobe Flash Player	Version 7.0
Adobe Flash Player	Version 7.0_r67
Adobe Flash Player	Version 7.1.1
Adobe Flash Player	Version 7.1
Adobe Flash Player	Version 7.2
Adobe Flash Player	Version 8.0.24.0
Adobe Flash Player	Version 8.0.34.0
Adobe Flash Player	Version 8.0.35.0
Adobe Flash Player	Version 8.0.39.0
Adobe Flash Player	Version 8.0
Adobe Flash Player	Version 8.0
Adobe Flash Player	Version 8.0
Adobe Flash Player	Version 8
Adobe Flash Player	Version 8
Adobe Flash Player	Version 9.0.112.0
Adobe Flash Player	Version 9.0.114.0
Adobe Flash Player	Version 9.0.124.0
Adobe Flash Player	Version 9.0.155.0
Adobe Flash Player	Version 9.0.16
Adobe Flash Player	Version 9.0.16
Adobe Flash Player	Version 9.0.18d60
Adobe Flash Player	Version 9.0.20.0
Adobe Flash Player	Version 9.0.20
Adobe Flash Player	Version 9.0.28.0
Adobe Flash Player	Version 9.0.28
Adobe Flash Player	Version 9.0.31.0
Adobe Flash Player	Version 9.0.31
Adobe Flash Player	Version 9.0.45.0
Adobe Flash Player	Version 9.0.47.0
Adobe Flash Player	Version 9.0.48.0
Adobe Flash Player	Version 9.0
Adobe Flex	Version 3.0

References (44)

http://lists.apple.com/archives/security-announce/2008//May/msg00001.html

Source: PSIRT-CNA@flexerasoftware.com

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00006.html

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/29763

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/29865

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/30430

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/30507

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://securityreason.com/securityalert/3805

Source: PSIRT-CNA@flexerasoftware.com

http://sunsolve.sun.com/search/document.do?assetkey=1-26-238305-1

Source: PSIRT-CNA@flexerasoftware.com

http://www.adobe.com/support/security/bulletins/apsb08-11.html

Source: PSIRT-CNA@flexerasoftware.com

PatchVendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200804-21.xml

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2008-0221.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/490623/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/archive/1/490824/100/0/threaded

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/28694

Source: PSIRT-CNA@flexerasoftware.com

ExploitPatch

http://www.securitytracker.com/id?1019810

Source: PSIRT-CNA@flexerasoftware.com

http://www.us-cert.gov/cas/techalerts/TA08-100A.html

Source: PSIRT-CNA@flexerasoftware.com

US Government Resource

http://www.us-cert.gov/cas/techalerts/TA08-150A.html

Source: PSIRT-CNA@flexerasoftware.com

US Government Resource

http://www.vupen.com/english/advisories/2008/1697

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2008/1724/references

Source: PSIRT-CNA@flexerasoftware.com

http://www.zerodayinitiative.com/advisories/ZDI-08-021

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/41717

Source: PSIRT-CNA@flexerasoftware.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10160

Source: PSIRT-CNA@flexerasoftware.com

http://lists.apple.com/archives/security-announce/2008//May/msg00001.html