Technical Description
Multiple vulnerabilitieshave been identified in Adobe Macromedia Flash Player, which could beexploited by attackers to bypass security restrictions or take completecontrol of an affected system.
The first flaw is due to input validation errors when handling overlylong dynamically generated strings, which could be exploited by remoteattackers to execute arbitrary commands via a malcious web page.
The second issue is due to an error within the "allowScriptAccess"option, which could be exploited by malicious web sites to bypasssecurity restrictions and conduct cross domain scripting attacks.
The third vulnerability is due to an error in the way the ActiveXcontrol is invoked by Office products, which could be exploited byattackers to execute arbitrary Flash code without user interaction whena malicious office document is opened.
Affected Products
Adobe Macromedia Flash Player versions prior to 9.0.16.0
Adobe Macromedia Flash Player versions prior to 8.0.33.0
Adobe Macromedia Flash Player versions prior to 7.0.68.0
Adobe Macromedia Flash Player versions prior to 7.0.66.0
Adobe Macromedia Flex versions prior to 7.0.65.0
Solution
Upgrade to fixed versions :
http://www.adobe.com/go/getflashplayer/
