CVE-2007-6245: Adobe Flash Player

Medium severity, CVSS 5.8. EPSS: 4.7% chance of exploitation in the next 30 days.

Adobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote attackers to modify HTTP headers for client requests and conduct HTTP Request Splitting attacks.

Affected products

• Adobe Flash Player: version 7.0 only; version 8.0 only; version 9.0 only

Published 2007-12-20. Last modified 2026-06-16.