CVE-2007-5275

The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie…

published October 8, 2007

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML document, and the availability of a Flash Socket class that does not use the browser's DNS pins, aka DNS rebinding attacks, a different issue than CVE-2002-1467 and CVE-2007-4324.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06153 · 93.5th percentile
Published
2007-10-08T23:00Z
EPSS history
Timeline
  • 08 OCT 23:00Z
    The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie…
    cvelistv5