$arr_19 ), array( 3, false, $arr_20, $arr_24 ), array( 2, false, "\" />", $arr_25 ) ) ); ?> $arr_27 ), array( 3, false, $arr_28, $arr_30 ), array( 2, false, "\" />\n\n", $arr_31 ) ) ); ?> array( 2, false, false, $arr_9 ), array( 4, $arr_10, "if", $arr_245, $arr_248 ), array( 2, false, "\n", $arr_249 ) ) ); ?> rr_466 ), array( 4, $arr_467, "if", $arr_482, $arr_484 ), array( 2, false, "\n", $arr_485 ) ) ); ?> Adobe Flash Player and Reader with Critical Security Advisory » Linux Magazine
 

Adobe Flash Player and Reader with Critical Security Advisory

Jul 24, 2009

Adobe announced a critical vulnerability for its Flash Player 9.0.159.0 and 10.0.22.87 and earlier, along with the authplay.dll component in its Reader and Acrobat 9.x., that goes across platforms in Windows, Macintosh, Linux and Solaris.

System crashes and exploits are possible as a result. The CVE-2009-1862 vulnerability is already causing exploits in Adobe Reader, according to the Adobe security bulletin. The reports of these "limited, targeted attacks" are currently under Windows only.

Adobe is venturing to fix this problem for the Flash Player 9 and 10 release on July 30 for all platforms except Solaris, which should come a bit later. Reader and Adobe 9.1.2 should be addressed July 31 for Windows, Mac and UNIX.

A workaround in the meantime is to remove or rename authplay.dll in Reader and Acrobat, although a non-exploitable crash or error message could then occur when opening a PDF with Small Web Format (SWF) content, such as animated vector graphics. Adobe cautions about browsing untrusted websites (keeping antivirus definitions up to date) or even advises uninstalling the software.

comments powered by Disqus

Issue 152/2013

Tag Cloud

Bruce Byfield Gnome KDE Kernel Linux Linux Pro Magazine Open Source Projects Red Hat Ubuntu events foss free software google

News