CVE-2007-6246

Vulnerability

Adobe Flash Player versions 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 on Linux set insecure permissions for memory regions. This design flaw means that the memory allocated by the Flash process may be readable or writable by other local processes without proper access control [1][2].

Exploitation

An attacker must have local access to the system (e.g., a shell or the ability to run arbitrary code on the target machine). No special authentication beyond being a local user is required. The attacker can then read or write to the Flash Player's memory space, potentially modifying program state or extracting sensitive data. No user interaction beyond the attacker's own actions is needed [1][2].

Impact

A local attacker can leverage the insecure memory permissions to escalate privileges, possibly gaining the rights of the user running the Flash Player or further compromising the system. This can lead to arbitrary code execution, information disclosure, or denial of service, depending on how the memory manipulation is used [2].

Mitigation

Adobe released fixed versions: upgrade to Flash Player 9.0.115.0 or later for Linux. Red Hat recommends applying the updated package from RHSA-2007:1126 [1]. Gentoo users should upgrade to >=www-plugins/adobe-flash-9.0.115.0 [2]. No workaround is known [2].