Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-6242

31
FAUCET Score

CVE-2007-6242 describes an unspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier versions, potentially allowing remote attackers to execute arbitrary code due to "input validation errors." This vulnerability carries a CVSS score of 6.8, indicating a medium severity risk, as it can be exploited remotely with medium attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. Despite its age and high FAUCET Risk Score of 97/100, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
>= 9.0.16.0, <= 9.0.48.0CPE matchmatch criteria
cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

6.8MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
30.06%
Probability of exploitation in next 30 days
EPSS Percentile
98.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.3006 is in the 98th percentile among its peer group of 19,958 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

redhatpatch availablevia redhat_api
Product: Extras for RHEL 3Fixed in: flash-plugin-0:9.0.115.0-1.el3.with.oss
View patch
redhatpatch availablevia redhat_api
Product: Extras for RHEL 4Fixed in: flash-plugin-0:9.0.115.0-1.el4
View patch
redhatpatch availablevia redhat_api
Product: Supplementary for Red Hat Enterprise Linux 5Fixed in: flash-plugin-0:9.0.115.0-1.el5
View patch
adobevendor investigatingvia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2007-6242Critical

flash: abitrary code execution

Dec 17, 2007

References

lists.opensuse.org / opensuse-security-announce/2007-12/msg00007.html
Mailing ListThird Party Advisory
secunia.com / advisories/28157
Third Party Advisory
secunia.com / advisories/28161
Third Party Advisory
secunia.com / advisories/28213
Third Party Advisory
secunia.com / advisories/28570
Third Party Advisory
secunia.com / advisories/30507
Third Party Advisory
securitytracker.com / id
Third Party AdvisoryVDB Entry
exchange.xforce.ibmcloud.com / vulnerabilities/39128
Third Party AdvisoryVDB Entry
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9188
Third Party Advisory
sunsolve.sun.com / search/document.do
Broken Link
adobe.com / support/security/bulletins/apsb07-20.html
Vendor Advisory
gentoo.org / security/en/glsa/glsa-200801-07.xml
Third Party Advisory
redhat.com / support/errata/RHSA-2007-1126.html
Third Party Advisory
securityfocus.com / bid/26951
Third Party AdvisoryVDB Entry
us-cert.gov / cas/techalerts/TA07-355A.html
Third Party AdvisoryUS Government Resource
vupen.com / english/advisories/2007/4258
Third Party Advisory
vupen.com / english/advisories/2008/1724/references
Third Party Advisory