Description
Adobe Flash Player 8.0.34.0 and earlier insufficiently validates HTTP Referer headers, which might allow remote attackers to conduct a CSRF attack via a crafted SWF file.
References
- 28068 third-party-advisory
- 1018359 vdb-entry
- 26357 third-party-advisory
- SUSE-SA:2007:046 vendor-advisory
- 201506 vendor-advisory
- ADV-2007-4190 vdb-entry
- 38049 vdb-entry
- GLSA-200708-01 vendor-advisory
- 26027 third-party-advisory
- flashplayer-swf-httpreferer-csrf(35338) vdb-entry
- TA07-192A third-party-advisory
- 26118 third-party-advisory
- ADV-2007-2497 vdb-entry
- 103167 vendor-advisory
- http://www.adobe.com/support/security/bulletins/apsb07-12.html
- VU#138457 third-party-advisory