Adobe Macromedia Flash Player Code Execution and Denial of Service Vulnerabilities
Technical Description



which could beexploited by attackers to take complete control of an affected systemor cause a denial of service.



The first vulnerability is due to improper memory access errors whenprocessing malformed SWF files, which could be exploited by attackersto execute arbitrary commands by tricking a user into visiting amalicious web page.



The second issue is due to an unspecified error when handling malformedSWF files, which could be exploited by malicious web sites to crash aweb browser linked against a vulnerable player.



Affected Products



Adobe Macromedia Flash Player version 8.0.24.0 and prior



Solution



Upgrade to Adobe Flash Player version 9.0.16.0 :

http://www.adobe.com/go/getflash
더보기

댓글,