Sponsored link
Serve your customers, not your servers, with VERIO Linux VPS. Full-access test-drive here.
| Weekly edition | Kernel | Security | Distributions | Search |
| Archives | Calendar | Subscribe | Write for LWN | LWN.net FAQ |
flash-player: CRLF injection vulnerability
| Package(s): | flash-player | CVE #(s): | CVE-2006-5330 | |||
| Created: | December 14, 2006 | Updated: | December 20, 2006 | |||
| Description: | Adobe Flash Player versions below 7.0.69 are vulnerable to a CRLF injection. Remote attackers can modify HTTP headers in client requests in order to conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions XML.addRequestHeader and XML.contentType. | |||||
| Alerts: |
| |||||
(Log in to post comments)