CVE-2007-2022

Adobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before 20070613, allows remote attackers to obtain sensitive information (browser keystrokes), which are leaked to the Flash Player applet.

• CWE-200

• ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
• http://secunia.com/advisories/24877Vendor Advisory
• http://secunia.com/advisories/25027Vendor Advisory
• http://secunia.com/advisories/25432Vendor Advisory
• http://secunia.com/advisories/25662Vendor Advisory
• http://secunia.com/advisories/25669Vendor Advisory
• http://secunia.com/advisories/25894Vendor Advisory
• http://secunia.com/advisories/25933Vendor Advisory
• http://secunia.com/advisories/26027Vendor Advisory
• http://secunia.com/advisories/26118Vendor Advisory
• http://secunia.com/advisories/26357Vendor Advisory
• http://secunia.com/advisories/26860Vendor Advisory
• http://secunia.com/advisories/28068Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1
• http://www.adobe.com/support/security/advisories/apsa07-03.html
• http://www.adobe.com/support/security/bulletins/apsb07-12.htmlVendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:138
• http://www.novell.com/linux/security/advisories/2007_12_sr.html
• http://www.novell.com/linux/security/advisories/2007_28_opera.html
• http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html
• http://www.opera.com/support/search/view/858/
• http://www.redhat.com/support/errata/RHSA-2007-0494.html
• http://www.securityfocus.com/bid/23437
• http://www.securitytracker.com/id?1017903
• http://www.us-cert.gov/cas/techalerts/TA07-192A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/1361Vendor Advisory
• http://www.vupen.com/english/advisories/2007/2497Vendor Advisory
• http://www.vupen.com/english/advisories/2007/4190Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33595
• https://issues.rpath.com/browse/RPL-1462
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9332
• ftp://patches.sgi.com/support/free/security/advisories/20070602-01-P.asc
• http://secunia.com/advisories/24877Vendor Advisory
• http://secunia.com/advisories/25027Vendor Advisory
• http://secunia.com/advisories/25432Vendor Advisory
• http://secunia.com/advisories/25662Vendor Advisory
• http://secunia.com/advisories/25669Vendor Advisory
• http://secunia.com/advisories/25894Vendor Advisory
• http://secunia.com/advisories/25933Vendor Advisory
• http://secunia.com/advisories/26027Vendor Advisory
• http://secunia.com/advisories/26118Vendor Advisory
• http://secunia.com/advisories/26357Vendor Advisory
• http://secunia.com/advisories/26860Vendor Advisory
• http://secunia.com/advisories/28068Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201506-1
• http://www.adobe.com/support/security/advisories/apsa07-03.html
• http://www.adobe.com/support/security/bulletins/apsb07-12.htmlVendor Advisory
• http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:138
• http://www.novell.com/linux/security/advisories/2007_12_sr.html
• http://www.novell.com/linux/security/advisories/2007_28_opera.html
• http://www.novell.com/linux/security/advisories/2007_46_flashplayer.html
• http://www.opera.com/support/search/view/858/
• http://www.redhat.com/support/errata/RHSA-2007-0494.html
• http://www.securityfocus.com/bid/23437
• http://www.securitytracker.com/id?1017903
• http://www.us-cert.gov/cas/techalerts/TA07-192A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2007/1361Vendor Advisory
• http://www.vupen.com/english/advisories/2007/2497Vendor Advisory
• http://www.vupen.com/english/advisories/2007/4190Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33595
• https://issues.rpath.com/browse/RPL-1462
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9332

Published

Apr 13, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2016Cross-site scripting (XSS) vulnerability in mysql/phpinfo.ph…
• CVE-2007-2017siteadmin/useredit.php in AlstraSoft Video Share Enterprise …
• CVE-2007-2018SQL injection vulnerability in msg.php in AlstraSoft Video S…
• CVE-2007-2019PHP remote file inclusion vulnerability in init.gallery.php …
• CVE-2007-2020Unspecified vulnerability in administration.php in xodagalle…9.8
• CVE-2007-2021Multiple PHP remote file inclusion vulnerabilities in Pineap…
• CVE-2007-2023USB20.dll in Secustick USB flash drive decouples the authori…
• CVE-2007-2024Unrestricted file upload vulnerability in the UpLoad feature…
• CVE-2007-2025Unrestricted file upload vulnerability in the UpLoad feature…
• CVE-2007-2026The gnu regular expression code in file 4.20 allows context-…
• CVE-2007-2027Untrusted search path vulnerability in the add_filename_to_s…
• CVE-2007-2028Memory leak in freeRADIUS 1.1.5 and earlier allows remote at…