CVE-2007-6637
Adobe Flash Player - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player allow remote attackers to inject arbitrary web script or HTML via a crafted SWF file, related to "pre-generated SWF files" and Adobe Dreamweaver CS3 or Adobe Acrobat Connect. NOTE: the asfunction: vector is already covered by CVE-2007-6244.1.
References (18)
Scores
EPSS
0.4477
EPSS Percentile
97.5%
Classification
CWE
CWE-79
Status
draft
Affected Products (18)
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
adobe/flash_player
... and 3 more
Timeline
Published
Jan 04, 2008
Tracked Since
Feb 18, 2026