myITforum.com

Welcome to myITforum.com Sign in | Join | Help
in Search

Harry Waldron at myITforum.com

Sharing Security Developments, and Best Practices for corporate and home users

Adobe Flash Player - Important Security Update

This tool is widely used in the browser environment and updates should be performed to the latest version.

Adobe Flash Player - Important Security Update
http://secunia.com/advisories/21865/
http://www.frsirt.com/english/advisories/2006/3573
http://www.adobe.com/support/security/bulletins/apsb06-11.html
http://www.microsoft.com/technet/security/advisory/925143.mspx

Quote:
Multiple vulnerabilities have been reported in Adobe Flash Player, which can be exploited by malicious people to bypass certain security restrictions or compromise a user's system.

1) A boundary error during the handling of strings dynamically generated at runtime can be exploited to cause a buffer overflow via an overly long string.

Successful exploitation allows execution of arbitrary code when e.g. visiting a malicious website.

2) An unspecified error allows bypassing the "allowScriptAccess" option.

3) Using a "Shockwave Flash Object", it is possible to execute Flash files containing JavaScript embedded in Office documents automatically when the Office document is opened.

Comments

No Comments
Powered by Community Server (Commercial Edition), by Telligent Systems