Fergie's Tech Blog

Adobe Ships 'Highly Critical' Flash Player Patch

Ryan Naraine writes on eWeek:

Adobe Systems has shipped an extremely critical patch to correct at least nine cross-platform vulnerabilities in its ubiquitous Flash Player software.

The APSB07-20 update, available for Adobe Flash Player 9.0.48.0 and earlier, 8.0.35.0 and earlier, and 7.0.70.0 and earlier, could allow complete system takeover attacks on Windows, Mac and Linux machines.

"A malicious SWF must be loaded in Flash Player by the user for an attacker to exploit these potential vulnerabilities," Adobe warned Dec. 19.

The company is strongly recommending that all users upgrade to Adobe Flash Player 9.0.115.0 (Win, Mac, Linux) via the software's auto-update mechanism. A patch for Solaris will be issued later.

posted by Fergie @ 12/19/2007 12:14:00 PM