Adobe Flash Player 'asfunction' Cross Site Scripting Vulnerability
BID:26949
Info
Adobe Flash Player 'asfunction' Cross Site Scripting Vulnerability
| Bugtraq ID: | 26949 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-6244 CVE-2008-6062 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 18 2007 12:00AM |
| Updated: | Mar 19 2015 09:42AM |
| Credit: | Adobe credits Rich Cannings of the Google Security Team with the discovery of this vulnerability. |
| Vulnerable: |
Turbolinux wizpy 0 Turbolinux FUJI 0 SuSE SUSE Linux Enterprise Desktop 10 SP1 SuSE openSUSE 10.3 Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_88 S.u.S.E. openSUSE 10.2 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 10.1 RedHat Enterprise Linux Extras 4.6.z RedHat Enterprise Linux Extras 4.5.z RedHat Enterprise Linux Extras 4 RedHat Enterprise Linux Extras 3 Red Hat Enterprise Linux Supplementary 5 server Red Hat Enterprise Linux Desktop Supplementary 5 client Nortel Networks Self-Service Peri Workstation 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service - CCSS7 0 Nortel Networks Media Processing Svr 1000 Rel 3.0 Gentoo Linux Adobe Flash Player 9.0.48.0 Adobe Flash Player 9.0.47.0 Adobe Flash Player 9.0.45.0 Adobe Flash Player 9.0.31.0 Adobe Flash Player 9.0.28.0 Adobe Flash Player 8.0.34.0 |
| Not Vulnerable: |
Adobe Flash Player 9.0.115.0 |
Discussion
Adobe Flash Player 'asfunction' Cross Site Scripting Vulnerability
Adobe Flash Player is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Adobe Flash Player is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.
Exploit / POC
Adobe Flash Player 'asfunction' Cross Site Scripting Vulnerability
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
The following proof-of-concept URIs are available:
http://www.example.com/FLVPlayer_Progressive.swf?skinName=asfunction:getURL,javascript:alert(1)//
http://www.example.com/main.swf?baseurl=asfunction:getURL,javascript:alert(1)//
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
The following proof-of-concept URIs are available:
http://www.example.com/FLVPlayer_Progressive.swf?skinName=asfunction:getURL,javascript:alert(1)//
http://www.example.com/main.swf?baseurl=asfunction:getURL,javascript:alert(1)//
Solution / Fix
Adobe Flash Player 'asfunction' Cross Site Scripting Vulnerability
Solution:
The vendor has released updates to address this issue. Please see the references for more information.
Adobe Flash Player 9.0.28.0
Adobe Flash Player 9.0.31.0
Adobe Flash Player 8.0.34.0
Adobe Flash Player 9.0.45.0
Turbolinux FUJI 0
Adobe Flash Player 9.0.47.0
Adobe Flash Player 9.0.48.0
Solution:
The vendor has released updates to address this issue. Please see the references for more information.
Adobe Flash Player 9.0.28.0
-
Adobe install_flash_player_9_linux.tar.gz
http://fpdownload.macromedia.com/get/flashplayer/current/install_flash _player_9_linux.tar.gz
Adobe Flash Player 9.0.31.0
-
Adobe install_flash_player_9_linux.tar.gz
http://fpdownload.macromedia.com/get/flashplayer/current/install_flash _player_9_linux.tar.gz
Adobe Flash Player 8.0.34.0
-
Adobe install_flash_player_9_linux.tar.gz
http://fpdownload.macromedia.com/get/flashplayer/current/install_flash _player_9_linux.tar.gz
Adobe Flash Player 9.0.45.0
-
Adobe install_flash_player_9_linux.tar.gz
http://fpdownload.macromedia.com/get/flashplayer/current/install_flash _player_9_linux.tar.gz
Turbolinux FUJI 0
-
Turbolinux flash-player-9.0.115.0-1.src.rpm
ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/11/u pdates/SRPMS/flash-player-9.0.115.0-1.src.rpm
Adobe Flash Player 9.0.47.0
-
Adobe install_flash_player_9_linux.tar.gz
http://fpdownload.macromedia.com/get/flashplayer/current/install_flash _player_9_linux.tar.gz
Adobe Flash Player 9.0.48.0
-
Adobe install_flash_player_9_linux.tar.gz
http://fpdownload.macromedia.com/get/flashplayer/current/install_flash _player_9_linux.tar.gz
References
Adobe Flash Player 'asfunction' Cross Site Scripting Vulnerability
References:
References:
- Adobe Flash Homepage (Adobe)
- NoScript Homepage (InformAction)
- XSS Vulnerabilities in Common Shockwave Flash Files ("rich cannings"
) - APSA07-06 - Vulnerabilities in some SWF files could allow cross-site scripting (Adobe)
- APSB07-20 Flash Player update available to address security vulnerabilities (Adobe)
- APSB08-01 - Update to Dreamweaver and Contribute to address potential cross-site (Adobe)
- APSB08-02 - Update available for Adobe Connect Enterprise Server cross-site scri (Adobe)
- Nortel Response to Sun Alert 238305 - Multiple Security Vulnerabilities in Flash (Nortel Networks)
- RHSA-2007:1126-8 - flash-plugin security update (Red Hat)
- Solution 238305: Multiple Security Vulnerabilities in Flash Player for Solaris (Sun Microsystems)
- Vulnerability Note VU#758769 (US-CERT)