Vulnerability Alerts
SANS
 
Microsoft
 
CERT/CC
 
 
Latest Comments
"My AVG WILL NOT UPDATE"
on AVG update deletes critical Windows file
by James Downs | Dec 2, 2008 5:58 AM
 
"Concerned man's comments seem to intimate that if I'm using agents all will be well but the ..."
on Shavlik Technologies to broaden its patch management offerings
by Werner K | Nov 26, 2008 8:36 PM
 
"That will enhance Microsoft Office system, including SharePoint - good platform for enterprise ..."
on Companies have security to consider with in-the-cloud Office
by SGE | Nov 25, 2008 3:29 PM
 
"how many users allow per session? because the digital persona password manager allows only 10 ..."
on DigitalPersona Pro Workstation/Pro Server
by Daniel | Nov 25, 2008 12:14 AM
 
"security through obscurity...shows how detached HIPAA is from reality."
on Privacy breaches causing business instability
by priceOfFishInChina | Nov 20, 2008 1:19 PM
Microsoft

Adobe fixes two Flash Player vulnerabilities

  • Email a Friend
  • Print Page
Adobe fixes two Flash Player vulnerabilities
Related Articles
By Dan Kaplan
Jul 12, 2007 9:34 AM
Tags: Adobe | fixes | two | Flash | Player | vulnerabilities
Rated "highly critical" by vulnerability tracking firm Secunia, the flaws can be corrected by upgrading to version 9.0.47.0, according to an Adobe security bulletin issued Tuesday.

One of the bugs is an input validation error that can be exploited to execute arbitrary code if a user clicks on an untrusted link and visits a malicious website, according to Adobe and Secunia advisories.

The other vulnerability can lead to a cross-site request forgery attack, which dupes a trusted user into loading a page containing a malicious request.

In this case, a bug in the Flash Player causes the HTTP referrer to be insufficiently validated.

According to Adobe, users unable to upgrade to Flash Player version 9 can continue to use a patched version of Flash Player 7.

 
Ads by Google
Thoughts on this article? Add a comment below.
Be the first to comment on this article.

Report this comment as offensive:

   * Indicates information we require to process your submission.

Name: *
Email: *
Reason for offense: *
Your report will not be displayed.  
Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below:

 

 
 
 
 
 
Tripwire - Click here to win an iTouch
 
 
Patch Management Whitepapers
 
Popular Tags
addresses adobe adobes clickjacking critical fixes flash flaws microsoft openoffice patch patches player reader six tuesday two update upgrade vulnerabilities