Wed, Jul 11 2007 6:01
Adobe Flash Player Multiple Vulnerabilities
Some vulnerabilities have been reported in Adobe
Flash Player, which can be exploited by malicious people to gain
knowledge of sensitive information or compromise a user's system.
1) An input validation error can be exploited to execute arbitrary code when a user e.g. visits a malicious website.
The vulnerability affects versions 220.127.116.11 and prior.
2) An error within the interaction of Flash Player and certain browsers
can be exploited to leak key presses to a Flash Player applet.
The vulnerability affects versions 18.104.22.168 and prior on Linux and Solaris. It does not affect Flash Player 9.
A bug has also been reported in the validation of the HTTP Referer in
versions 22.214.171.124 and prior, which may aid in e.g. CSRF (Cross-Site
Request Forgery) attacks.
Secunia has constructed the Secunia Software Inspector, which you can use to check if your system is vulnerable:
Update to version 126.96.36.199.
Filed under: Advisories / Bulletins