July 11, 2007

Adobe fixes two Flash Player vulnerabilities

Adobe is encouraging users of Flash Player to upgrade to the latest version to avoid falling victim to two vulnerabilities that could allow attackers to take complete system control.

Rated "highly critical" by vulnerability tracking firm Secunia, the flaws can be corrected by upgrading to version 9.0.47.0, according to an Adobe security bulletin issued Tuesday.

One of the bugs is an input validation error that can be exploited to execute arbitrary code if a user clicks on an untrusted link and visits a malicious website, according to Adobe and Secunia advisories.

The other vulnerability can lead to a cross-site request forgery attack, which dupes a trusted user into loading a page containing a malicious request. In this case, a bug in the Flash Player causes the HTTP referrer to be insufficiently validated.

According to Adobe, users unable to upgrade to Flash Player version 9 can continue to use a patched version of Flash Player 7.

Click here to email reporter Dan Kaplan.

Related Articles
Related Topics

More in News

Google hackers wanted to know which Chinese intel operatives were being watched

Attackers who raided Google in 2010 to learn information about Chinese human rights activists were also trying to gain insight on which Chinese intelligence agents were on the radar of U.S. authorities, according to a report.

California law would require breach notice if online account information is stolen

The new legislation would amend the definition of "personal information" under the state's breach notification law.

Liable to attack: Cyber insurance can help organizations cover the cost of breaches

Liable to attack: Cyber insurance can help organizations ...

Everyone is familiar with health, flood, car and life insurance, but what happens when the digital equivalent of a disaster strikes? Some entities may want this peace of mind, but ...