Help - Search - Members - Calendar
Full Version: Adobe Flash Player Unspecified Vulnerability
TotalChoice Hosting Family Forums > TotalChoice Hosting General Support > Security Discussions > Software/Scripts/Other Alerts
TCH-Thomas
From:
Secunia (secunia.com/advisories/30404/)

Rating:
Extremely critical

Description:
A vulnerability has been reported in Adobe Flash Player, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error. No further information is currently available.

NOTE: Reportedly, this is currently being actively exploited.

The vulnerability is reported in version 9.0.124.0. Other versions may also be affected.

Solution:
Do not browse untrusted websites or follow untrusted links.
TCH-Bruce
Thanks Thomas. Don't you just love these unspecified vulnerabilities?
TCH-Thomas
Some media here in Sweden now reports that this was fixed in the latest version (9.0.124.0) although the Secunia report says otherwise.
TCH-MikeJ
QUOTE (TCH-Thomas @ May 29 2008, 03:26 AM) *
Some media here in Sweden now reports that this was fixed in the latest version (9.0.124.0) although the Secunia report says otherwise.


It was. See Adobe's post about it.

QUOTE
UPDATE: This exploit appears to be taking advantage of a known vulnerability, reported by Mark Dowd of the ISS X-Force and wushi of team509, that was resolved in Flash Player 9.0.124.0 (CVE-2007-0071). We strongly encourage everyone to download and install the latest Flash Player update, 9.0.124.0.


And the Secunia advisory has been revoked.

You can check your flash player version by visiting Adobe's Version Test.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.