Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
CRLF injection vulnerability in Adobe Flash Player plugin 9.0.16 and earlier for Windows, 7.0.63 and earlier for Linux, 7.x before 7.0 r67 for Solaris, and before 9.0.28.0 for Mac OS X, allows remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks via CRLF sequences in arguments to the ActionScript functions (1) XML.addRequestHeader and (2) XML.contentType. NOTE: the flexibility of the attack varies depending on the type of web browser being used.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Adobe Flash Player Plugin HTTP报头跨站脚本请求伪造漏洞
Vulnerability Description
针对Windows的Adobe Flash Player plugin 9.0.16以及针对Linux的7.0.63版本以及更早的版本,其包含CRLF注入漏洞,远程攻击者可以通过ActionScript函数(1)XML.addRequestHeader和(2)XML.contentType的自变量中的CRLF序列来修改客户端请求的HTTP报头和执行HTTP请求拆分攻击。
CVSS Information
N/A
Vulnerability Type
N/A