Adobe Flash Update - March 21, 2011
Please update the Adobe Flash component for your browsers as automatically prompted
Adobe Flash Player update addresses a critical security issue (CVE-2011-0609)
http://www.adobe.com/support/security/bulletins/apsb11-05.html
http://isc.sans.edu/diary/Adobe+Flash+Player+update+RSA+further+notification+and+Play+com+breach/10585
QUOTE: A critical vulnerability has been identified in Adobe Flash Player 10.2.152.33 and earlier versions (Adobe Flash Player 10.2.154.18 and earlier versions for Chrome users) for Windows, Macintosh, Linux, and Solaris operating systems, and Adobe Flash Player 10.1.106.16 and earlier versions for Android. This vulnerability (CVE-2011-0609), as referenced in Security Advisory APSA11-01, could cause a crash and potentially allow an attacker to take control of the affected system. There are reports that this vulnerability is being exploited in the wild against Flash Player in targeted attacks via a Flash (.swf) file embedded in a Microsoft Excel (.xls) file delivered as an email attachment.