Click to See Complete Forum and Search --> : Adobe Flash Player Unspecified Vulnerability - Extremely critical!!!


Broni
May 28th, 2008, 10:47 PM
TITLE:
Adobe Flash Player Unspecified Vulnerability

SECUNIA ADVISORY ID:
SA30404

VERIFY ADVISORY:
http://secunia.com/advisories/30404/

CRITICAL:
Extremely critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
Adobe Flash Player 9.x
http://secunia.com/product/11901/

DESCRIPTION:
A vulnerability has been reported in Adobe Flash Player, which can be
exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error. No further
information is currently available.

NOTE: Reportedly, this is currently being actively exploited.

The vulnerability is reported in version 9.0.124.0. Other versions
may also be affected.

SOLUTION:
Do not browse untrusted websites or follow untrusted links.

frebo
May 29th, 2008, 05:24 PM
edit

Welshjim
May 29th, 2008, 05:31 PM
Broni--Thanks for the bad news. Please keep us updated if a fix is offered.
frebo--I do not think Flash has anything to do with Adobe Reader, but I could be wrong. :)

frebo
May 29th, 2008, 05:50 PM
your right jim i didnt read it good just disregard

Welshjim
May 29th, 2008, 07:21 PM
Broni--The first page of the Secunia link you provided really did not say too much. I clicked on the 2008 advisories and could not find reference to the versions of Flash that are vulnerable. Do you have a link for that?
I ran Secunia's Online Software Inspector scan. It said 9.0.124.0 (on my PC) is OK.
I wonder if there is some confusion with the April vulnerability announcement from Adobe, where they suggest updating to 9.0.124.0http://www.adobe.com/support/security/bulletins/apsb08-11.html
However PSI did say that my Macromedia Flash Player (v 6.0.79.0) is "insecure" and should be updated to v 6.0.88.0.

Broni
May 29th, 2008, 09:37 PM
I ran Secunia's Online Software Inspector scan. It said 9.0.124.0 (on my PC) is OK.
I think, it may take time from issuing a warning to actually update PSI database.
The article mentions ver. 9.0.124.0, which is the latest, but it says, that all 9.x versions may be affected.
No Flash update, yet.