Severity: High
28 May, 2008
Summary:
- These vulnerabilities affect: Adobe Flash Player 9.0.124.0 and earlier on Windows (potentially affects OS X, Unix, and Linux as well)
- How an attacker exploits them: By enticing one of your users into playing a maliciously crafted Flash (.SWF) file
- Impact: An attacker could execute code on the victim’s computer, and take control of it
- What to do: Adobe hasn’t released a patch yet; see the solution section below for workarounds
Exposure:
Adobe Flash Player displays interactive, animated web content called Flash, often formatted as a Shockwave (.SWF) file. Adobe’s Flash Player ships by default with many web browsers, including Internet Explorer (IE). It also runs on many operating systems.
0 Comments