CVE-2007-6246 — Adobe Flash Player vulnerability

CWE-2644 documents4 sources
Severity
4.4MEDIUMNVD
EPSS
0.3%
top 51.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Adobe Flash Player
Timeline
PublishedDec 20
Latest updateMay 1

Description

Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running on Linux, uses insecure permissions for memory, which might allow local users to gain privileges.

CVSS vector

AV:L/AC:M/C:P/I:P/A:PExploitability: 3.4 | Impact: 6.4

Affected Packages1 packages

▶NVDadobe/flash_player9.0.48.0

🔴Vulnerability Details

1
GHSA
GHSA-v825-9g78-r6x2: Adobe Flash Player 9↗2022-05-01
▶

📋Vendor Advisories

1
Red Hat
flash: privilege escalation↗2007-12-17
▶

💬Community

1
Bugzilla
CVE-2007-6246 flash: privilege escalation↗2007-12-06
▶