R-049: HTTP Header Injection Vulnerabilities in Adobe Flash Player


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) R-049: HTTP Header Injection Vulnerabilities in Adobe Flash Player
# 1  
Old 12-24-2007
R-049: HTTP Header Injection Vulnerabilities in Adobe Flash Player

These vulnerabilities would allow remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks. The risk is LOW. These vulnerabilities would allow remote attackers to modify HTTP headers of client requests and conduct HTTP Request Splitting attacks. The flexibility of the attack varies depending on the type of web browser being used.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. Solaris

How to make Adobe Flash Player plugin work for Firefox 13.01 on Solaris 11

How do I make Adobe flash Player work on solaris 11 for Firefox-13.0.1 which doesn't have a plugins directory? Thanks in advance.:o (0 Replies)
Discussion started by: Tenyhwa
0 Replies
Login or Register to Ask a Question
Net::HTTP::NB(3pm)					User Contributed Perl Documentation					Net::HTTP::NB(3pm)

NAME
Net::HTTP::NB - Non-blocking HTTP client SYNOPSIS
use Net::HTTP::NB; my $s = Net::HTTP::NB->new(Host => "www.perl.com") || die $@; $s->write_request(GET => "/"); use IO::Select; my $sel = IO::Select->new($s); READ_HEADER: { die "Header timeout" unless $sel->can_read(10); my($code, $mess, %h) = $s->read_response_headers; redo READ_HEADER unless $code; } while(1) { die "Body timeout" unless $sel->can_read(10); my $buf; my $n = $s->read_entity_body($buf, 1024); last unless $n; print $buf; } DESCRIPTION
Same interface as "Net::HTTP" but it will never try multiple reads when the read_response_headers() or read_entity_body() methods are invoked. This make it possible to multiplex multiple Net::HTTP::NB using select without risk blocking. If read_response_headers() did not see enough data to complete the headers an empty list is returned. If read_entity_body() did not see new entity data in its read the value -1 is returned. SEE ALSO
Net::HTTP COPYRIGHT
Copyright 2001 Gisle Aas. This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself. perl v5.14.2 2012-02-15 Net::HTTP::NB(3pm)