Adobe Flash Player 8.0.34.0 and earlier insufficiently validates HTTP Referer headers, which might allow remote attackers to conduct a CSRF attack via a crafted SWF file.

The Adobe Flash Player was updated to version 7.0.70.0 for Novell Linux Desktop 9 and to version 9.0.48.0 on SUSE Linux Enterprise Desktop 10 to fix several security problems :

  - An input validation error has been identified in Flash     Player 9.0.45.0 and earlier versions that could lead to     the potential execution of arbitrary code. This     vulnerability could be accessed through content     delivered from a remote location via the user's web     browser, email client, or other applications that     include or reference the Flash Player. (CVE-2007-3456)

  - An issue with insufficient validation of the HTTP     Referer has been identified in Flash Player 8.0.34.0 and     earlier. This issue does not affect Flash Player 9. This     issue could potentially aid an attacker in executing a     cross-site request forgery attack. (CVE-2007-3457)

  - The Linux and Solaris updates for Flash Player 7     (7.0.70.0) address the issues with Flash Player and the     Opera and Konqueror browsers described in Security     Advisory APSA07-03. These issues do not impact Flash     Player 9 on Linux or Solaris. (CVE-2007-2022)

The affected webbrowsers Opera and konqueror have already been fixed independendly.

The Adobe Flash Player was updated to version 7.0.70.0 on SUSE Linux 10.0 and to version 9.0.48.0 on SUSE Linux 10.1 and openSUSE 10.2 to fix several security problems :

CVE-2007-3456: An input validation error has been identified in Flash Player 9.0.45.0 and earlier versions that could lead to the potential execution of arbitrary code. This vulnerability could be accessed through content delivered from a remote location via the user's web browser, email client, or other applications that include or reference the Flash Player.

CVE-2007-3457: An issue with insufficient validation of the HTTP Referer has been identified in Flash Player 8.0.34.0 and earlier. This issue does not affect Flash Player 9. This issue could potentially aid an attacker in executing a cross-site request forgery attack.

CVE-2007-2022: The Linux and Solaris updates for Flash Player 7 (7.0.70.0) address the issues with Flash Player and the Opera and Konqueror browsers described in Security Advisory APSA07-03. These issues do not impact Flash Player 9 on Linux or Solaris.

The affected webbrowsers Opera and konqueror have already been fixed independendly.

The remote host is affected by the vulnerability described in GLSA-200708-01 (Macromedia Flash Player: Remote arbitrary code execution)

    Mark Hills discovered some errors when interacting with a browser for     keystrokes handling (CVE-2007-2022). Stefano Di Paola and Giorgio Fedon     from Minded Security discovered a boundary error when processing FLV     files (CVE-2007-3456). An input validation error when processing HTTP     referrers has also been reported (CVE-2007-3457).
  Impact :

    A remote attacker could entice a user to open a specially crafted file,     possibly leading to the execution of arbitrary code with the privileges     of the user running the Macromedia Flash Player, or sensitive data     access.
  Workaround :

    There is no known workaround at this time.

Adobe reports :

Critical vulnerabilities have been identified in Adobe Flash Player that could allow an attacker who successfully exploits these potential vulnerabilities to take control of the affected system. A malicious SWF must be loaded in Flash Player by the user for an attacker to exploit these potential vulnerabilities.

According to its version number, the instance of Flash Player on the remote Windows host could allow for arbitrary code execution by means of a malicious SWF file. 

In addition, it may also fail to sufficiently validate the HTTP Referer header, which may aid in cross-site request forgery attacks. This issue does not, though, affect Flash Player 9.

ID	Name	Product	Family	Severity
29434	SuSE 10 Security Update : flash-player (ZYPP Patch Number 3890)	Nessus	SuSE Local Security Checks	high
27221	openSUSE 10 Security Update : flash-player (flash-player-3889)	Nessus	SuSE Local Security Checks	high
25866	GLSA-200708-01 : Macromedia Flash Player: Remote arbitrary code execution	Nessus	Gentoo Local Security Checks	high
25718	FreeBSD : linux-flashplugin -- critical vulnerabilities (b42e8c32-34f6-11dc-9bc9-001921ab2fa4)	Nessus	FreeBSD Local Security Checks	high
25694	Flash Player Multiple Vulnerabilities (APSB07-12)	Nessus	Windows	high

Detections

Analytics

CVE-2007-3457

high

Tenable Plugins

high

high

high

high

high