Flash Vulnerability Info
Summary: On 5-27-2008 Symantec issued a 0-day vulnerability alert for malicious SWF files circulating in the wild, initially stating the issue was unknown and affected Flash Player version 9.0.124.0 and other Adobe products that process SWF files. Further analysis of the exploit files showed the 0-day categorization was incorrect and that the files were a working implementation of the vulnerability described by Mark Dowd of IBM X-Force, CVE-2007-0071.
Bottom line: The alert that went out as an unknown 0-day was in fact a known flaw, CVE-2007-0071, already documented by IBM X-Force - a reminder that an initial severity call can be wrong in either direction, and that patch status against an existing CVE is what determines exposure.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Mentions
- CVE-2007-0071
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026