Flash Player 9.0.45.0 and earlier allow an attacker to manipulate HTTP referrer headers by way of ActionScript. This allows an attacker to spoof the origin of a request and bypass common filters to prevent CSRF. An attacker could leverage this for to issue a CSRF from outside of the target's domain.

Upgrade to Adobe Flash Player version 9.0.47.0 (Windows) or version 9.0.48.0 (Linux), as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

• Security Tracker: 1018359
• CERT VU: 138457
• CVE ID: 2007-3457 (see also: NVD)
• Bugtraq ID: 24856
• Secunia Advisory ID: 26027 26057 26118 26357 28068
• ISS X-Force ID: 35338
• Related OSVDB ID: 38054
• VUPEN Advisory: ADV-2007-2497
• Keyword: CSRF
• Other Advisory URL: http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00008.html
  http://sunsolve.sun.com/search/document.do?assetkey=1-26-103167-1
  http://www.gentoo.org/security/en/glsa/glsa-200708-01.xml
• Vendor Specific News/Changelog Entry: http://www.adobe.com/support/security/bulletins/apsb07-12.html
• RedHat RHSA: RHSA-2007:0696

• Daiki Fukumori - Secure Sky Technology, Inc.