Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:
Category:Red Hat Local Security Checks
Title:RedHat Security Advisory RHSA-2007:0009

The remote host is missing updates announced in
advisory RHSA-2007:0009.

The flash-plugin package contains a Firefox-compatible Adobe Flash Player
browser plug-in.

A flaw was found in the way the Adobe Flash Player generates HTTP requests.
It was possible for a malicious Adobe Flash file to modify the HTTP header
of the client request, which could be leveraged to exploit certain HTTP proxy
and web server flaws. (CVE-2006-5330)

Users of Adobe Flash Player should upgrade to this updated package, which
contains version 7.0.69 and is not vulnerable to this issue.

Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date

Risk factor : Medium

CVSS Score:

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2006-5330
BugTraq ID: 20592
Bugtraq: 20061017 Rapid7 Advisory R7-0026: HTTP Header Injection Vulnerabilities in the Flash Player Plugin (Google Search)
Cert/CC Advisory: TA07-072A
SuSE Security Announcement: SUSE-SA:2006:077 (Google Search)
XForce ISS Database: flashplayer-multiple-xsrf(29634)
CopyrightCopyright (c) 2007 E-Soft Inc.

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

© 1998-2021 E-Soft Inc. All rights reserved.