The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with arbitrary hosts via a Flash (SWF) movie, related to lack of pinning of a hostname to a single IP address after receiving an allow-access-from element in a cross-domain-policy XML document, and the availability of a Flash Socket class that does not use the browser's DNS pins, aka DNS rebinding attacks, a different issue than CVE-2002-1467 and CVE-2007-4324.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Flashplayerplugin | — | Upgrade macOS to the latest versionApply OS X security update 2008-003 | Dec 16, 2011 | Oct 8, 2007 |
| Freebsd | — | Upgrade linux-flashplugin | Dec 10, 2025 | Jan 3, 2008 |
| Gentoo Linux | — | Upgrade www-plugins/adobe-flash. | Oct 30, 2017 | Oct 8, 2007 |
| Suse | — | Upgrade flash-playerUpgrade suse-release | Feb 17, 2015 | Oct 8, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub