Vulnerability   
Search   
    Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2006-5330
Description:CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions (1) XML.addRequestHeader and (2) XML.contentType. NOTE: the flexibility of the attack varies depending on the type of web browser being used.
Test IDs: 1.3.6.1.4.1.25623.1.0.58033   1.3.6.1.4.1.25623.1.0.57766  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2006-5330
http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html
BugTraq ID: 20592
http://www.securityfocus.com/bid/20592
Bugtraq: 20061017 Rapid7 Advisory R7-0026: HTTP Header Injection Vulnerabilities in the Flash Player Plugin (Google Search)
http://www.securityfocus.com/archive/1/448997/100/0/threaded
Cert/CC Advisory: TA07-072A
http://www.us-cert.gov/cas/techalerts/TA07-072A.html
http://www.rapid7.com/advisories/R7-0026.jsp
http://www.osvdb.org/29863
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11405
RedHat Security Advisories: RHSA-2007:0009
http://www.redhat.com/support/errata/RHSA-2007-0009.html
http://securitytracker.com/id?1017078
http://secunia.com/advisories/22467
http://secunia.com/advisories/23324
http://secunia.com/advisories/23581
http://secunia.com/advisories/24479
http://secunia.com/advisories/25467
http://securityreason.com/securityalert/1737
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102932-1
SuSE Security Announcement: SUSE-SA:2006:077 (Google Search)
http://lists.suse.com/archive/suse-security-announce/2006-Dec/0006.html
http://www.vupen.com/english/advisories/2006/4094
http://www.vupen.com/english/advisories/2007/0930
http://www.vupen.com/english/advisories/2007/1999
XForce ISS Database: flashplayer-multiple-xsrf(29634)
https://exchange.xforce.ibmcloud.com/vulnerabilities/29634




© 1998-2021 E-Soft Inc. All rights reserved.