Adobe fixes two Flash Player vulnerabilities

Share this article:

Adobe is encouraging users of Flash Player to upgrade to the latest version to avoid falling victim to two vulnerabilities that could allow attackers to take complete system control.

Rated "highly critical" by vulnerability tracking firm Secunia, the flaws can be corrected by upgrading to version 9.0.47.0, according to an Adobe security bulletin issued Tuesday.

One of the bugs is an input validation error that can be exploited to execute arbitrary code if a user clicks on an untrusted link and visits a malicious website, according to Adobe and Secunia advisories.

The other vulnerability can lead to a cross-site request forgery attack, which dupes a trusted user into loading a page containing a malicious request. In this case, a bug in the Flash Player causes the HTTP referrer to be insufficiently validated.

According to Adobe, users unable to upgrade to Flash Player version 9 can continue to use a patched version of Flash Player 7.

Click here to email reporter Dan Kaplan.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

President signs Executive Order to improve payment security

President signs Executive Order to improve payment security

President Obama signed an Executive Order at the Consumer Financial Protection Bureau calling for enhanced security measures, including microchips and PINs.

Security, tech firm coalition fights Hikit actors, other advanced groups

Security, tech firm coalition fights Hikit actors, other ...

The coalition began as an effort to stop the spread of the Hikit trojan, previously known for targeting U.S. defense contractors.

Phishing email delivers keylogger malware, also takes screenshots

Phishing email delivers keylogger malware, also takes screenshots

The malware has various features, including the ability to start persistently, take screenshots and bypass user access controls.