Skip to content
OpenAdvisories
Unscored RHSA-2008:0221 8 CVEs

Red Hat Security Advisory: flash-plugin security update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 3 rhel_extras:3 flash-plugin 0:9.0.124.0-1.el3.with.oss
Red Hat · RHEL 4 rhel_extras:4 flash-plugin 0:9.0.124.0-1.el4
Red Hat · RHEL 5 rhel_extras:5::client flash-plugin 0:9.0.124.0-1.el5
Red Hat · RHEL 5 rhel_extras:5::server flash-plugin 0:9.0.124.0-1.el5

Vulnerabilities 8

  • Unscored —
    CVE-2007-0071 EPSS 93%

    Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to exec…

  • Unscored —
    CVE-2007-5275

    The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with a…

  • Unscored —
    CVE-2007-6019 Public exploit EPSS 60%

    Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2007-6243

    Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not sufficiently restrict the in…

  • Unscored —
    CVE-2007-6637

    Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2008-1654

    Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to pe…

  • Unscored —
    CVE-2008-1655

    Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for re…

  • Unscored —
    CVE-2008-3872

    Adobe Flash Player 8.0.39.0 and earlier, and 9.x up to 9.0.115.0, allows remote attackers to bypass the allowScriptAcce…

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=367501
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440664
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440666
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440683
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440684
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440696
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=440698
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0221.json
  • report
    https://access.redhat.com/security/cve/CVE-2007-0071
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-0071
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-0071
  • report
    https://access.redhat.com/security/cve/CVE-2007-5275
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5275
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5275
  • report
    https://access.redhat.com/security/cve/CVE-2007-6019
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6019
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6019
  • report
    https://access.redhat.com/security/cve/CVE-2007-6243
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6243
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6243
  • report
    https://access.redhat.com/security/cve/CVE-2007-6637
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-6637
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-6637
  • report
    https://access.redhat.com/security/cve/CVE-2008-1654
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1654
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1654
  • report
    https://access.redhat.com/security/cve/CVE-2008-1655
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-1655
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-1655
  • report
    https://access.redhat.com/security/cve/CVE-2008-3872
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618334
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3872
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3872