CVE-2007-6242
UnknownEPSS 30.06%
Last modified
CVE-2007-6242 is a vulnerability of currently unknown severity. Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors, related to "input validation errors.". EPSS estimates a 30.06% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors, related to "input validation errors."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Flash Player | >= 9.0.16.0, <= 9.0.48.0 |
References
- http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.htmlMailing List, Third Party Advisory
- http://secunia.com/advisories/28157Third Party Advisory
- http://secunia.com/advisories/28161Third Party Advisory
- http://secunia.com/advisories/28213Third Party Advisory
- http://secunia.com/advisories/28570Third Party Advisory
- http://secunia.com/advisories/30507Third Party Advisory
- http://securitytracker.com/id?1019116Third Party Advisory, VDB Entry
- http://www.gentoo.org/security/en/glsa/glsa-200801-07.xmlThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2007-1126.htmlThird Party Advisory
- http://www.securityfocus.com/bid/26951Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA07-355A.htmlThird Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2007/4258Third Party Advisory
- http://www.vupen.com/english/advisories/2008/1724/referencesThird Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39128Third Party Advisory, VDB Entry
- http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00007.htmlMailing List, Third Party Advisory
- http://secunia.com/advisories/28157Third Party Advisory
- http://secunia.com/advisories/28161Third Party Advisory
- http://secunia.com/advisories/28213Third Party Advisory
- http://secunia.com/advisories/28570Third Party Advisory
- http://secunia.com/advisories/30507Third Party Advisory
- http://securitytracker.com/id?1019116Third Party Advisory, VDB Entry
- http://www.gentoo.org/security/en/glsa/glsa-200801-07.xmlThird Party Advisory
- http://www.redhat.com/support/errata/RHSA-2007-1126.htmlThird Party Advisory
- http://www.securityfocus.com/bid/26951Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA07-355A.htmlThird Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2007/4258Third Party Advisory
- http://www.vupen.com/english/advisories/2008/1724/referencesThird Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39128Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-6242?
Unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers to execute arbitrary code via unknown vectors, related to "input validation errors."
How severe is CVE-2007-6242?
Severity scoring for CVE-2007-6242 is pending analysis. The EPSS model estimates a 30.06% probability of exploitation in the next 30 days.
How do I fix CVE-2007-6242?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-6236Microsoft Windows Media Player (WMP) allows remote attackers…
- CVE-2007-6237cp.php in DeluxeBB 1.09 does not verify that the membercooki…
- CVE-2007-6238Unspecified vulnerability in Apple QuickTime 7.2 on Windows …
- CVE-2007-6239The "cache update reply processing" functionality in Squid 2…
- CVE-2007-6240SQL injection vulnerability in active.asp in Snitz Forums 20…
- CVE-2007-6241Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 …
- CVE-2007-6243Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, a…
- CVE-2007-6244Multiple cross-site scripting (XSS) vulnerabilities in Adobe…
- CVE-2007-6245Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, a…
- CVE-2007-6246Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, a…
- CVE-2007-6247Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2007-6249etc-update in Portage before 2.1.3.11 on Gentoo Linux relies…
Are you affected by CVE-2007-6242?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
