Description
Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTTP headers for client requests and conduct HTTP Request Splitting attacks.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 5 | flash-plugin | 9.0.115.0-1.el5 | RHSA-2007:1126 |
| RHEL 4 | flash-plugin | 9.0.115.0-1.el4 | RHSA-2007:1126 |
| RHEL 3 | flash-plugin | 9.0.115.0-1.el3.with.oss | RHSA-2007:1126 |
Advisories 1
- RHSA-2007:1126 Red Hat Security Advisory: flash-plugin security update Red Hat Security Advisories (RHSA) · Jun 29, 2026
References
- SUSE-SA:2007:069 vendor-advisory
- 28157 third-party-advisory
- 30507 third-party-advisory
- 28570 third-party-advisory
- ADV-2008-1724 vdb-entry
- TA07-355A third-party-advisory
- GLSA-200801-07 vendor-advisory
- 26929 vdb-entry
- 28161 third-party-advisory
- RHSA-2007:1126 vendor-advisory
- 238305 vendor-advisory
- ADV-2007-4258 vdb-entry
- 1019116 vdb-entry
- oval:org.mitre.oval:def:9546 vdb-entry signature
- adobe-unspecified-response-splitting(39134) vdb-entry
- 26969 vdb-entry
- 28213 third-party-advisory
- http://www.adobe.com/support/security/bulletins/apsb07-20.html