Vulnerability in Macromedia Flash Player

Madrid, November 7, 2005 - Macromedia has reported a critical security flaw in Flash Player version 7.0.19.0 and earlier, which could allow arbitrary code to be run. Users are therefore, recommended to install the update that resolves this vulnerability.

The problem lies in Flash.ocx, module that processes SWF files. An attacker can design a web page containing a specially-crafted SWF file, which could run arbitrary code on the computers of users that viewed the page with a vulnerable Flash Player.

Macromedia recommend users of Flash Player to install version 8, which is available at: http://www.macromedia.com/go/getflash. Users of Windows 95, Windows NT or Macintosh -for which Flash Player 8 is not available-, can install version 7r61 available at: http://www.macromedia.com/cfusion/knowledgebase/index.cfm?id=d9c2fe33

More information about this vulnerability and the security updates are available in the bulletin published by Macromedia at http://www.macromedia.com/devnet/security/security_zone/mpsb05-07.html

Oxygen3 24h-365d, by Panda Software
© Panda Software 2003

2005-11-08 12:02

Back

IT News: