Adobe Flash Player for Opera on Mac OS X unspecified
| flash-opera-macosx-unspecified (37250) |  Low Risk |
Description:
An unspecified vulnerability in Adobe Flash Player for the Opera Web browser when running on Mac OS X systems has an unknown impact and attack vector.
Platforms Affected:
- Adobe, Flash Player 9
- Adobe, Flash Player 9.0.124.0
- Adobe, Flash Player 9.0.16
- Adobe, Flash Player 9.0.18d60
- Adobe, Flash Player 9.0.20
- Adobe, Flash Player 9.0.20.0
- Adobe, Flash Player 9.0.28
- Adobe, Flash Player 9.0.28.0
- Adobe, Flash Player 9.0.31
- Adobe, Flash Player 9.0.31.0
- Adobe, Flash Player 9.0.45.0
- Adobe, Flash Player 9.0.47.0
- Apple, Mac OS X 10.4.11
- Apple, Mac OS X 10.5.1
- Apple, Mac OS X Server 10.4.11
- Apple, Mac OS X Server 10.5.1
- Opera, Opera prior to 9.24
- Sun, OpenSolaris 2008.5 x86
- Sun, OpenSolaris 2008.5 SPARC
- Sun, Solaris 10 SPARC
- Sun, Solaris 10 x86
Remedy:
Upgrade to the latest version of Opera (9.24 or later), as listed in Opera Software Knowlege Base Article 868. See References.
For other distributions:
Apply the appropriate update for your system. See References.
Consequences:
Other
References:
- Apple Web site, About Security Update 2007-009 at http://docs.info.apple.com/article.html?artnum=307179.
- Apple Web site, About Security Update 2007-009 v1.1 at http://docs.info.apple.com/article.html?artnum=307224.
- APSA07-05, Potential Vulnerability with Adobe Flash Player and Opera on Mac OSX at http://www.adobe.com/support/security/advisories/apsa07-05.html.
- APSB07-20, Flash Player update available to address security vulnerabilities at http://www.adobe.com/support/security/bulletins/apsb07-20.html.
- BugTraq Mailing List, Mon Dec 17 2007 - 15:47:29 CST, Apple OS X Software Update Remote Command Execution at http://archives.neohapsis.com/archives/bugtraq/2007-12/0217.html.
- NORTEL BULLETIN ID: 2008008954, Rev 1, Nortel Response to Sun Alert 238305 - Multiple Security Vulnerabilities in Flash Player for Solaris 10 at http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=745016.
- Opera Software Knowledge Base Article 868, Opera security upgrade for Mac OS X at http://www.opera.com/support/search/view/868/.
- Sun Alert ID: 238305, Multiple Security Vulnerabilities in Flash Player for Solaris at http://sunsolve.sun.com/search/document.do?assetkey=1-66-238305-1.
- ASA-2008-241: Multiple Security Vulnerabilities in Flash Player for Solaris (Sun 238305)
- BID-26274: Adobe Flash Player On Opera Browser For Mac OSX Unspecified Vulnerability
- CVE-2007-5476: Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown Highly Severe impact and unknown attack vectors.
- FrSIRT/ADV-2007-4238: Apple Mac OS X Code Execution and Information Disclosure Vulnerabilities
- FrSIRT/ADV-2007-4258: Adobe Flash Player Code Execution and Security Bypass Vulnerabilities
- FrSIRT/ADV-2008-1724: Sun Security Update Fixes Flash Player Code Execution Vulnerabilities
- SA28136: Apple Mac OS X Security Update Fixes Multiple Vulnerabilities
- SA28161: Adobe Flash Player Multiple Vulnerabilities
- SECTRACK ID: 1018830: Opera Mac OS X Unspecified Bug in Adobe Flash Player Has Unspecified Impact
Reported:
Oct 17, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net