Launchpad CVE tracker

CVE 2007-3457

Adobe Flash Player 8.0.34.0 and earlier insufficiently validates HTTP Referer headers, which might allow remote attackers to conduct a CSRF attack via a crafted SWF file.

Related bugs and status

CVE-2007-3457 (Candidate) is related to these bugs:

Bug #125233: [flashplugin-nonfree] Arbitrary code execution in Flash Player 9.0.45.0 and prior versions

Summary				In	Importance	Status
	125233	[flashplugin-nonfree] Arbitrary code execution in Flash Player 9.0.45.0 and prior versions		flashplugin-nonfree (Ubuntu)	Undecided	Fix Released
	125233	[flashplugin-nonfree] Arbitrary code execution in Flash Player 9.0.45.0 and prior versions		flashplugin-nonfree (Ubuntu Feisty)	High	Fix Committed

Bug #125986: [MASTER] No flash after update of flashplugin-nonfree

Summary				In	Importance	Status
	125986	[MASTER] No flash after update of flashplugin-nonfree		flashplugin-nonfree (Ubuntu)	Undecided	Fix Released
	125986	[MASTER] No flash after update of flashplugin-nonfree		firefox (Ubuntu)	Undecided	Invalid

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2007-3457

References