HTTP: Adobe Flash Player ActiveX CSS Exploit

This signature detects attempts to exploit a known vulnerability in Adobe Flash Play ActiveX. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX calls, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

The Adobe Flash Player ActiveX control is prone to a cross-domain scripting vulnerability. An attacker may leverage this issue to execute arbitrary JavaScript in the context of another domain. This issue affects Adobe Flash Player 9.0.48.0, 8.0.35.0, and prior versions. NOTE: This issue was previously disclosed in BID 26929 (Adobe Flash Player Multiple Security Vulnerabilities) but has been assigned its own BID because new technical details are available.

Affected Products

Red_hat enterprise_linux_extras

References

BugTraq: 26960

CVE: CVE-2007-6244

URL: http://crypto.stanford.edu/advisories/CVE-2007-6244/

Short Name

HTTP:STC:ACTIVEX:FLASH9D-CSS

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Adobe Flash Player ActiveX CSS Exploit

Extended Description

Affected Products

References

Found a potential security threat?