CVE-2008-1654

Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF) style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated by changing the primary DNS server.

Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF) style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated by changing the primary DNS server.

Error en la interacción entre Adobe Flash y múltiples servicios Universal Plug and Play (UPnP), permite a atacantes remotos realizar ataques del tipo falsificación de petición en sitios cruzados (CSRF) utilizando la función de Flash navigateToURL para enviar un mensaje SOAP a un punto de control UPnP, como se ha demostrado cambiando el servidor DNS primario.